crylock | b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a

Analysis

max time kernel
122s
max time network
118s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
05-11-2024 12:22

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Ransomware VXUG Ransom.exe
Size

202KB
MD5

5f43ead2fcf68ab420a0b563dd1b23f4
SHA1

15b4dd41a806ce1c23164735f997f4b0b09f3db8
SHA256

b1ac46470933de2096f95f35116dc3dd2a52b416150b75dc3d5e3ee4d521a09a
SHA512

e3511218e4ff9b8db11d1124a5106b5e63d3aa18af1980744552b5b0fa172b9d3c0257b2b34f231addf057d04cbb8a4ec1709d1e1e1b8d3d651822b278863638
SSDEEP

3072:NjnBqm4O2oVkkdIqWaFcdG/GYAuv9vX01FBdvuVOe5/XhVRXf4cVbMTjIlmR:9nBFRqqWe2Z3DisYP1v1Fl

Score

10^/10

crylock credential_access discovery persistence ransomware spyware stealer

Malware Config

Extracted

Path

C:\$Recycle.Bin\S-1-5-21-3551809350-4263495960-1443967649-1000\how_to_decrypt.hta

Ransom Note

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">  <html> <title>VXUG Ransomware</title> <hta:application showInTaskBar="no" APPLICATION="yes" ICON='msiexec.exe' SINGLEINSTANCE='yes' SysMenu="no" applicationname="CryLock" border="thick" contexmenu="no" scroll="no" selection="yes" singleinstance="yes" windowstate="normal" MAXIMIZEBUTTON="NO" BORDER="DIALOG" width="100" height="100" MINIMIZEBUTTON="NO"></hta:application> <script language="JavaScript"> var max_discount = 50; var start_date = new Date('November 5 2024 12:22:11'); var discount_date = new Date('November 10 2024 12:22:11'); var end_date = new Date('November 12 2024 12:22:11'); var main_contact = '[email protected]'; var hid = '[8373001E-F343000A]'; var second_contact = '@vxunderground'; var sd = end_date; var dn = new Date(); var zoc, ddGlobal; function document.onblur() { alert('Attention! This important information for you!'); } function setContacts() { document.getElementById('main_contact').innerHTML = main_contact; document.getElementById('second_contact').innerHTML = second_contact; document.getElementById('hid').innerHTML = hid; } function countDiscount() { var term_current = new Date().getTime() - start_date.getTime(); var term_full = discount_date.getTime() - start_date.getTime(); var delta = discount_date.getTime() - new Date().getTime(); delta = new Date(delta); var dt = document.getElementById('pwr'); var timer_discount = document.getElementById('timer_discount'); var discount = document.getElementById('discount'); var hours_to_end = Math.floor(term_full / 1000 / 3600); var hours_current = Math.floor(term_current / 1000 / 3600); if (discount_date.getTime() > dn.getTime()) { var disc_per_hour = parseFloat(max_discount / hours_to_end).toFixed(2); var cur_discount = Math.floor(max_discount - (disc_per_hour * hours_current)); if (discount) { discount.innerHTML = cur_discount + '% discount'; } } if (cur_discount <= 25) { dt.style.cssText = 'border: 1px solid #FFC000;'; if (timer_discount) { timer_discount.style.background = '#FFC000'; } } if (sd.getTime() < dn.getTime() || cur_discount < 5) { dt.style.cssText = 'border: 1px solid #F53636; background-color: #F53636; padding: 16px 20px;'; dt.innerHTML = '<div style="font-size: 16px; color: #ffffff; text-align: center; display: block; font-weight: bold;">Decryption key can be bought at standard cost.</div><div style="font-size: 13px; color: #fff; text-align: center; margin-top: 10px">You need to hurry up to decrypt your data because all your files will be destroyed soon.</div>'; } var dd = (delta.getUTCDate()-1) + ((delta.getUTCMonth()) * 31); var hh = delta.getUTCHours(); var mm = delta.getUTCMinutes(); var ss = delta.getUTCSeconds(); if (dd!=1) { dd=dd+' days'; } else { dd=dd+' day'; } if (hh<10) { hh='0'+hh; } if (mm<10) { mm='0'+mm; } if (ss<10) { ss='0'+ss; } if (timer_discount) { timer_discount.innerHTML = dd + ' ' + hh+':'+mm+':'+ss; } } function ChangeTime() { var sd = end_date; var dn = new Date(); if (sd.getTime() < dn.getTime()) { var dt = document.getElementById('lctw'); dt.innerHTML = '<b>Soon, you won\'t be able to decrypt your files. Contact us immediately!</b>'; dt.style.cssText = 'background-color: #F53636; color: #ffffff; font-weight: bold; padding: 19px 24px; margin: 17px 0 24px; text-align: center; font-size: 20px;'; zoc = 2; } else { var delta = sd.getTime() - dn.getTime(); delta = new Date(delta); var dd = (delta.getUTCDate()-1) + ((delta.getUTCMonth()) * 31); ddGlobal = parseInt(dd); var hh = delta.getUTCHours(); var mm = delta.getUTCMinutes(); var ss = delta.getUTCSeconds(); if (dd!=1) { dd=dd+' days'; } else { dd=dd+' day'; } if (hh<10) { hh='0'+hh; } if (mm<10) { mm='0'+mm; } if (ss<10) { ss='0'+ss; } var dt = document.getElementById('file_lost'); if (dt) { dt.innerHTML= dd+'     '+hh+':'+mm+':'+ss; } } } var count = 100, interval = 10, intervalID; function blink() { if (ddGlobal == 0 && zoc != 2) { var dt = document.getElementById('file_lost'); var dt2 = document.getElementById('text_file_lost'); var test = document.getElementById('test'); if (count == 100) { intervalId = setInterval(function () { dt.style.filter = 'alpha(opacity='+count+')'; dt2.style.filter = 'alpha(opacity='+count+')'; count = count - 2; if (count == 20) clearInterval(intervalId); }, interval); } if (count == 20) { intervalId = setInterval(function () { dt.style.filter = 'alpha(opacity='+count+')'; dt2.style.filter = 'alpha(opacity='+count+')'; count = count + 2; if (count == 100) clearInterval(intervalId); }, interval); } } } function getRandomArbitrary(min, max) { min = Math.ceil(min); max = Math.floor(max); return Math.floor(Math.random() * (max - min)) + min; } function Rndom() { var dt=document.getElementById('rc'); var xx=''; var i=0; while (i < 40) { xx=xx+getRandomArbitrary(0,2); i=i+1; } rc.innerHTML= xx; } function Start() { window.resizeTo(850,720); setContacts(); ChangeTime(); setInterval(ChangeTime, 1000); countDiscount(); setInterval(countDiscount, 1000); setInterval(blink, 100); setInterval(Rndom,100); } function copytext(s) { window.clipboardData.setData("Text",s); alert(s+' copied to clipboard'); } function Restart() { alert('Attention! This important information for you!'); } </script> <body style="background: #000; font: 12px 'Arial', sans-serif; padding: 0; margin: 0;" onload="Start();"> <div style="height: 100%; position: absolute; top: 0; left: 0; background-color: #ffffff; box-sizing: border-box; padding: 20px; overflow-x: hidden;overflow-y: hidden;"> <div style="background-color: #000000; width: 100%; height: 55px;" id="header"> <div style="color: #F53636; font-weight: bold; font-size: 40px; text-transform: uppercase; line-height: 54px; padding-left: 8px; float: left;">ENCRYPTED BY VXUG</div> <div style="font-size: 18px; color: #7E7E7E; float: right; line-height: 55px; padding-right: 17px;" id="rc">11100001111011111111100001111011111100</div> </div> <div style="clear: both; float: none; height: 18px; width: 100%;"></div> <div> <div style="float: left; width: 144px; height: 110px; background-color: #000000; color: #ffffff; text-align: center; line-height: 1;"> <b style="display: block; font-size: 43px; margin-top: 24px;">What</b> <b style="display: block; font-size: 20px;">happened?</b> </div> <div style="float: right; width: 630px;"> <b style="font-size: 13px; color: #F53636;">All your documents, databases, backups, and other critical files were encrypted by vx-underground.</b> <div>Our software used the AES cryptographic algorithm (you can find related information in Wikipedia).</div> <br> <div>It happened because of security problems on your server, and you cannot use any of these files anymore. The only way to recover your data is to buy a decryption key from us. </div> <br> <div>To do this, please send your unique ID to the contacts below.</div> </div> <div style="clear: both; float: none; height: 18px; width: 100%;"></div> </div> <div> <div style="float: left; width: 540px;"> <div style="background: #EDEDED; height: 63px; line-height: 63px; margin-bottom: 5px; cursor: pointer;" OnClick="copytext(main_contact)"> <div style="width: 80px; float: left; font-size: 16px; color: #737373; padding-left: 18px;">E-mail:</div> <b style="float: left; font-size: 14px; padding-left: 76px;" id="main_contact"></b> <div href="#" style="float: right; padding-right: 18px; font-size: 16px; color: #828282; font-weight: bold;" >copy</div> <div style="clear: both; float: none;"></div> </div> <div style="background: #EDEDED; height: 63px; line-height: 63px; margin-bottom: 5px; cursor: pointer;" OnClick="copytext(hid)"> <div style="width: 80px; float: left; font-size: 16px; color: #737373; padding-left: 18px;">Unique ID:</div> <b style="float: left; font-size: 14px; padding-left: 76px;" id="hid"></b> <div href="#" style="float: right; padding-right: 18px; font-size: 16px; color: #828282; font-weight: bold;" >copy</div> <div style="clear: both; float: none;"></div> </div> <div style="margin-top: 17px; line-height: 18px;">Right after payment, we will send you a specific decoding software that will decrypt all of your files. If you have not received the response within 24 hours, please contact us on twitter <span style="text-decoration: underline;" OnClick="copytext(second_contact)" id="second_contact"></span>.</div> </div> <div style="float: right; width: 230px;"> <div style="border: 1px solid #2FAB61;" id="pwr"> <div style="padding: 13px 14px 3px 14px; text-align: center; font-size: 14px;">During a short period, you can buy a decryption key with a </div> <div style="font-size: 25px; text-align: center; display: block; font-weight: bold;" id="discount">50% discount</div> <div id="timer_discount" style="margin-top: 10px; background-color: #219653; padding: 5px 0; text-align: center; font-size: 25px; font-weight: bold; color: #ffffff;">--:--:-- left</div> </div> <div style="margin-top: 17px; line-height: 18px;">The price depends on how soon you will contact us.</div> </div> <div style="clear: both; float: none;"></div> </div> <div style="background-color: #F53636; color: #ffffff; font-weight: bold; padding: 19px 24px; margin: 17px 0 24px" id="lctw"> <div style="float: left; font-size: 20px; padding-top: 3px;" id="text_file_lost">All your files will be deleted permanently in:</div> <div style="float: right; font-size: 25px;" id="file_lost"></div> <div style="clear: both; float: none;"></div> </div> <div> <div style="float: left; width: 540px;"> <b style="margin-bottom: 11px; font-size: 14px; display: block;">Attention! <div id="test"></div></b> <ul style="list-style: none; padding: 0; margin: 0;"> <li style="position: relative; padding-left: 20px; font-size: 12px; margin-bottom: 14px;"> <span style="position: absolute; font-size: 27px; left: 0; color: #F53636; top: -1px;">!</span> <span style="color: #F53636;">Do not try to recover files yourself.</span> this process can damage your data and recovery will become impossible.</li> <li style="position: relative; padding-left: 20px; font-size: 12px; margin-bottom: 14px;"> <span style="position: absolute; font-size: 27px; left: 0; color: #F53636; top: -1px;">!</span> <span style="color: #F53636;">Do not waste time trying to find the solution on the Internet.</span> The longer you wait, the higher will become the decryption key price.</li> <li style="position: relative; padding-left: 20px; font-size: 12px margin-bottom: 14px;"> <span style="position: absolute; font-size: 27px; left: 0; color: #F53636; top: -1px;">!</span> <span style="color: #F53636;">Do not contact any intermediaries.</span> They will buy the key from us and sell it to you at a higher price.</li> </ul> </div> <div style="float: right; width: 230px;"> <b style="margin-bottom: 11px; font-size: 14px; display: block;">What guarantees do you have?</b> <div>Before payment, we can decrypt three files for free. The total file size should be less than 5MB (before archiving), and the files should not contain any important information (databases, backups, large tables, etc.)</div> </div> <div style="clear: both; float: none;"></div> </div> </div> </body> </html>

Emails

[email protected]

Signatures

Crylock
Ransomware family, which is a new variant of Cryakl ransomware.
ransomware crylock
Crylock family
crylock
Renames multiple (8347) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware
Credentials from Password Stores: Windows Credential Manager 1 TTPs
Suspicious access to Credentials History.
credential_access stealer

Windows Credential Manager
T1555.004

Drops startup file 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Word\STARTUP\how_to_decrypt.hta	Ransomware VXUG Ransom.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Adds Run key to start application 2 TTPs 3 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Windows\CurrentVersion\Run\8373001E-F343000Ahta = "C:\\Users\\Admin\\AppData\\Local\\Temp\\how_to_decrypt.hta"	Ransomware VXUG Ransom.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Windows\CurrentVersion\Run\8373001E-F343000A = "C:\\Users\\Admin\\AppData\\Local\\Temp\\Ransomware VXUG Ransom.exe"	Ransomware VXUG Ransom.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\1531351 = "1531351"	Ransomware VXUG Ransom.exe

Enumerates connected drives 3 TTPs 1 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\F:	Ransomware VXUG Ransom.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGCHKBRD.XML	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0215710.WMF	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\CONVERT\1033\DELIMR.FAE	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\OutlookAutoDiscover\ROGERS.COM.XML	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\visualvm\modules\com-sun-tools-visualvm-tools.jar	Ransomware VXUG Ransom.exe
File created	C:\Program Files\VideoLAN\VLC\locale\ru\LC_MESSAGES\how_to_decrypt.hta	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\PE00726_.WMF	Ransomware VXUG Ransom.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Setup Files\how_to_decrypt.hta	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files\Java\jre7\lib\zi\America\Mazatlan	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0382969.JPG	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files\Common Files\System\ado\msadox28.tlb	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\profiler\update_tracking\org-netbeans-modules-profiler-api.xml	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files (x86)\Adobe\Reader 9.0\Resource\Linguistics\Providers\Proximity\11.00\usa.fca	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Europe\Madrid	Ransomware VXUG Ransom.exe
File created	C:\Program Files\Java\jre7\lib\management\how_to_decrypt.hta	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\NA02388_.WMF	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms4\FormsStyles\Premium.css	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Tracker\turnOffNotificationInAcrobat.gif	Ransomware VXUG Ransom.exe
File created	C:\Program Files (x86)\Common Files\microsoft shared\MSClientDataMgr\how_to_decrypt.hta	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files (x86)\Common Files\microsoft shared\TextConv\WPFT532.CNV	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\CONCRETE\PREVIEW.GIF	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBSPAPR\ZPDIR46B.GIF	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files\Common Files\System\msadc\it-IT\msdaremr.dll.mui	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\jre\lib\zi\Africa\Lagos	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.rjmx_5.5.0.165303\icons\diagnostic-command-16.png	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files\Java\jre7\lib\zi\America\Boise	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files\Java\jre7\lib\zi\Asia\Makassar	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files\Microsoft Office\Office14\VisioCustom.propdesc	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD21434_.GIF	Ransomware VXUG Ransom.exe
File created	C:\Program Files (x86)\Microsoft Office\Office14\Document Parts\how_to_decrypt.hta	Ransomware VXUG Ransom.exe
File created	C:\Program Files\Common Files\Microsoft Shared\ink\th-TH\how_to_decrypt.hta	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\SpecialOccasion\NavigationUp_SelectionSubpicture.png	Ransomware VXUG Ransom.exe
File created	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Optional\how_to_decrypt.hta	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files (x86)\Common Files\microsoft shared\THEMES14\BREEZE\THMBNAIL.PNG	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\CLIPART\PUB60COR\J0144773.JPG	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\CONTACTL.ICO	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\MSCOL11.INF	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files\Common Files\Microsoft Shared\ink\de-DE\tabskb.dll.mui	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files\Common Files\Microsoft Shared\ink\fsdefinitions\auxpad\auxbase.xml	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\AUTOSHAP\BD18199_.WMF	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\Groove\ToolData\groove.net\GrooveForms3\rtf_underline.gif	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files\Java\jre7\lib\zi\Europe\Lisbon	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files\Microsoft Games\Chess\fr-FR\Chess.exe.mui	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\DGPUNCT.DPV	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\org.w3c.dom.smil_1.0.0.v200806040011.jar	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\visualvm\platform\modules\locale\org-netbeans-modules-autoupdate-services_zh_CN.jar	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files\7-Zip\Lang\fr.txt	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files\DVD Maker\Shared\DvdStyles\Vignette\softedges.png	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\MEDIA\OFFICE14\BULLETS\BD14756_.GIF	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\1033\PUB6INTL.DLL.IDX_DLL	Ransomware VXUG Ransom.exe
File created	C:\Program Files (x86)\Microsoft Office\Office14\how_to_decrypt.hta	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Templates\1033\Access\Part\Dialog.accdt	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\lua\intf\cli.luac	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files (x86)\Common Files\microsoft shared\ink\en-US\mip.exe.mui	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\1033\PUBWZINT.REST.IDX_DLL	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\FORMS\1033\REPORTS.ICO	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Office14\PUBWIZ\QP.DPV	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files\Common Files\System\msadc\es-ES\msadcor.dll.mui	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Document Themes 14\Theme Colors\Black Tie.xml	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files (x86)\Google\Update\1.3.36.151\GoogleUpdateComRegisterShell64.exe	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files (x86)\Adobe\Reader 9.0\Reader\plug_ins\Checkers.api	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files (x86)\Microsoft Office\Templates\1033\BlackTieLetter.dotx	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files\Java\jdk1.7.0_80\lib\missioncontrol\plugins\com.jrockit.mc.greychart.ui_5.5.0.165303.jar	Ransomware VXUG Ransom.exe
File opened for modification	C:\Program Files\VideoLAN\VLC\locale\an\LC_MESSAGES\vlc.mo	Ransomware VXUG Ransom.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Ransomware VXUG Ransom.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	mshta.exe

Modifies Internet Explorer settings 1 TTPs 1 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3551809350-4263495960-1443967649-1000\Software\Microsoft\Internet Explorer\Main	mshta.exe

Suspicious behavior: EnumeratesProcesses 5 IoCs

pid	Process
2412	Ransomware VXUG Ransom.exe
2412	Ransomware VXUG Ransom.exe
2412	Ransomware VXUG Ransom.exe
2412	Ransomware VXUG Ransom.exe
2412	Ransomware VXUG Ransom.exe

Suspicious use of AdjustPrivilegeToken 4 IoCs

description	pid	Process
Token: SeDebugPrivilege	2412	Ransomware VXUG Ransom.exe
Token: SeDebugPrivilege	2412	Ransomware VXUG Ransom.exe
Token: SeDebugPrivilege	2412	Ransomware VXUG Ransom.exe
Token: SeDebugPrivilege	2412	Ransomware VXUG Ransom.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 2412 wrote to memory of 4720	2412	Ransomware VXUG Ransom.exe	32
PID 2412 wrote to memory of 4720	2412	Ransomware VXUG Ransom.exe	32
PID 2412 wrote to memory of 4720	2412	Ransomware VXUG Ransom.exe	32
PID 2412 wrote to memory of 4720	2412	Ransomware VXUG Ransom.exe	32

C:\Users\Admin\AppData\Local\Temp\Ransomware VXUG Ransom.exe
"C:\Users\Admin\AppData\Local\Temp\Ransomware VXUG Ransom.exe"
1⤵
- Drops startup file
- Adds Run key to start application
- Enumerates connected drives
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2412
- C:\Windows\SysWOW64\mshta.exe
  "C:\Windows\SysWOW64\mshta.exe" "C:\Users\Admin\AppData\Local\Temp\how_to_decrypt.hta"
  2⤵
  - System Location Discovery: System Language Discovery
  - Modifies Internet Explorer settings
  PID:4720

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Windows Credential Manager

T1555.004

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\$Recycle.Bin\S-1-5-21-3551809350-4263495960-1443967649-1000\how_to_decrypt.hta

Filesize
13KB

MD5
c6f6537782d6b6899466c6fafcecf215

SHA1
e2d290e284ad0e4df6d4f82fa248411b2d60c0e8

SHA256
2eac092e525f7125c9a1757cd67c220a0d064ad8631a072ad45ea561d8de972f

SHA512
389379a94e6cf98ad97adfef3c52092fda1fbc3f31be9e7b8279332ebc3f75e25acc768790f61bcd0ac1b36e2aaee858f77fbcdc6446d417e6fb9da6df39bf0b

Download Submit
C:\ProgramData\Adobe\Acrobat\9.0\Replicate\Security\directories.acrodata[[email protected]][1].[8373001E-F343000A]

Filesize
1KB

MD5
2aff660ab52a6cae32e22ed9279ceaf1

SHA1
b89aafe3408a943f56dc6e6efafc4aa9cbfafd7b

SHA256
a90ba757e29d5d1dae82b21890c5505f3b52365a168478fc178f67456926b836

SHA512
e5b8d82741c3c47c4629a5aaa104dff7163e2379514d32f9500c0bf016ae12002a840a502d4e964835f252f4abc7b161ac5b49ee2e52db784d0e33c522379db5

Download Submit
C:\ProgramData\Adobe\Updater6\AdobeESDGlobalApps.xml[[email protected]][1].[8373001E-F343000A]

Filesize
936B

MD5
89db601d03a514a77d26230873df9fab

SHA1
d14fa7f41a9ebe7806c5b9eb424292933647b87c

SHA256
d68721a832e4ba76866ff05c0538357d71b230209fd0185ce447a45294d96a8f

SHA512
bca9e4331efec8c61e2a3aa3598bcecb00bdb4056312c596ad3e60893fb4e2e8122acfe9dccc914b1fe09533d4289ba824753c999166f14e56116500a5b1f6b6

Download Submit
C:\ProgramData\Microsoft Help\Hx.hxn[[email protected]][1].[8373001E-F343000A]

Filesize
951B

MD5
96258c8150f39836d61b1ed185346c89

SHA1
10e8e6008120c29744de0e8ec9fdab6e5e396e8e

SHA256
971c14dc338869eeff4d2067135a4aa1dff6bbc3bcaf5d330984d17253bc2e2e

SHA512
38aae564b334ebab305c322d8da31556b7fd579ddd765ab439982515b61eb4cb808bf7268694cb6ae52466cf693c7bdef653ec9144ce89ce2ad7c9f091637b5d

Download Submit
C:\ProgramData\Microsoft Help\Hx_1033_MKWD_K.HxW[[email protected]][1].[8373001E-F343000A]

Filesize
14KB

MD5
cbfbfae427b8583892273004173dca9d

SHA1
6d6ddf1d5101ff54edb3928d91021a2abb12a1c4

SHA256
97503c5d24718b0fa64ee9b6a8f89c43ce392091288610ccc4a920f0272859ec

SHA512
db73c12cb8a4b36f7cd5fc5d445a9ded81dfddacda02efab3fe259c4f5e8083dbd138d22ecde08be21759785f63da1073adbedc9bd6480829302ea2d9b8cbae6

Download Submit
C:\ProgramData\Microsoft Help\Hx_1033_MKWD_NamedURL.HxW[[email protected]][1].[8373001E-F343000A]

Filesize
14KB

MD5
2d47060d2ca175a8fabc371578918a84

SHA1
50b8af6caf80bd175205437fd0daf100f583298f

SHA256
aac98b85136aad9ef9324e015f355763e9ab587fd7f26f9cbf051368eeb33247

SHA512
02d9ddacbd859b89a43d5b019e6a7b0739f0c4d1143d375591ea0d52dc576e183d0f3fda7d8b6a26db4761f54d7d09c9a01b6f6a79d8e4357ab9f3264dd0885c

Download Submit
C:\ProgramData\Microsoft Help\Hx_1033_MTOC_Hx.HxH[[email protected]][1].[8373001E-F343000A]

Filesize
10KB

MD5
c38fa4a34eda4628e25e5a7fc8b3e33b

SHA1
1237a1b94657178ce81fe5de860ee1359f8fd4a3

SHA256
ba360c4b5cc01e688f612ac714030a8e23bac9054afa1479e49d456e1890c8c7

SHA512
66aaadd37c6879317dbf54d8c74a8d93d590ce1b257b40f617324f192b273a0bc2e8decf42f3639c65197affbd7b7bfea87c7ceb644ec9802374513c34eb6cb0

Download Submit
C:\ProgramData\Microsoft Help\Hx_1033_MValidator.HxD[[email protected]][1].[8373001E-F343000A]

Filesize
10KB

MD5
ae54d9fe6b2a84d98d7a8e33c82f6697

SHA1
ecab63b1f42e969d4a3e7d682fe0b7a53ec9b9e5

SHA256
5dd6751987db8f072e12b327e4a57e3f5342cceb2f2e3e13a67622a414148ff2

SHA512
0aa019cccb49bb927acaed5eb8ec1f4f5082d760fb36795e7ff76321e6c19ceef0a0d9bf36ef68980f27f4272b089e9d7c48d0938980a79ae2f3f8f5181e7bef

Download Submit
C:\ProgramData\Microsoft Help\Hx_1033_MValidator.Lck[[email protected]][1].[8373001E-F343000A]

Filesize
659B

MD5
fb63f6a8684b66d4e9404feddbb6e2fa

SHA1
d13fd07915b5ad4caf76236f66ee6ebf858eb822

SHA256
ee56a62366341ae9bab73dc5a43922e9533a9112930da4143f013c4d7fc17a5b

SHA512
eaef3985538b6184a7a4c92da59afe1eef5b29c09d039b4a231ec115a4edec3594d005a5ff10d5f8411cedcf7731aa45a08d97d4414b4426444a9f25d0c9c5df

Download Submit
C:\ProgramData\Microsoft Help\MS.EXCEL.14.1033.hxn[[email protected]][1].[8373001E-F343000A]

Filesize
995B

MD5
81204c94c4afa622818f17ef964884ca

SHA1
d904d99c69c73d28e140b929803fd4f3f7556326

SHA256
c32065871dd1438edeade56c21d7953446e000af661c90fe5a4c6d76c8324e68

SHA512
e3b2707828f034bc6d8b08c7b965f4bb1eac2473858c52053dd7d5b0a457454ac55fc32d10d10e612270224373036e5cd6af17979cdca00b77891c8b676f1b67

Download Submit
C:\ProgramData\Microsoft Help\MS.EXCEL.DEV.14.1033.hxn[[email protected]][1].[8373001E-F343000A]

Filesize
1KB

MD5
7cdf59f7952f76311c5195fd7deec883

SHA1
289b270a0817b23dd873575fbe38acbb047112f2

SHA256
5f3a17fee9f3a4e4634284e8c58bab64cf9293350ffe4d93584fb92e60db7cb5

SHA512
fc0374afa9a4ce36ec7a005707d57dfac5793924cf8107fdcf970f8647dec2291156c5804241bee2f319403a2dc3d2bc6a4e9a8bf06932d6bfbe1be922fef883

Download Submit
C:\ProgramData\Microsoft Help\MS.GRAPH.14.1033.hxn[[email protected]][1].[8373001E-F343000A]

Filesize
995B

MD5
7004168fb8373c3d9846896b9aca05d2

SHA1
73bbaafbd5cdf5bc64db63e78cf660735be33db0

SHA256
6bd50e681f86973fd014063b69ea9d7d697dba4900216e5fba7a3dd151704c49

SHA512
65533f73d8dd11b99535e831101dbe15de1261227ae3017534973fc3002ecd076efea924fe5f861401e7b69df57bc97dc9419e53d82253a5cee1cc0ff03b714c

Download Submit
C:\ProgramData\Microsoft Help\MS.GROOVE.14.1033.hxn[[email protected]][1].[8373001E-F343000A]

Filesize
1007B

MD5
7622d355e2fc4e761c84cf8ba352826f

SHA1
00f582267a5abca2ef54135a883decf5cbd37ca9

SHA256
ff4d992ce4e656bcf31708e1f4397bcb34d77fbdcf8bdf3508a5af37eebb57c8

SHA512
5f364a9d98d6aba524aca09f5565d16ed35d3b6a90c2afbaf19a6f01c0d1bca503226c78a3159f625637c8e7374a17ed453a48ab11ac2d43a1517b359498b5a3

Download Submit
C:\ProgramData\Microsoft Help\MS.INFOPATH.14.1033.hxn[[email protected]][1].[8373001E-F343000A]

Filesize
1KB

MD5
a36d75d2040d993136564f6fd87758c7

SHA1
3f22fafaea133fe5b18cc446f5f32b0cf82d445f

SHA256
6487f5343472e1edd4dd1914b20d9b500c72c705240030ca5851d57ca12559fd

SHA512
8bff1836f576f0f8c9b2177edc535aec7c409e806d535fcbc4ca9dbead993fc64a4c5c6d3d3c525cc666e06736c0e6cc8729ea25cf267fd7e8c38fabe875cc1a

Download Submit
C:\ProgramData\Microsoft Help\MS.INFOPATHEDITOR.14.1033.hxn[[email protected]][1].[8373001E-F343000A]

Filesize
1KB

MD5
d7a40f9f34c4918b858047a9857ff5ac

SHA1
76af675283cc7035c7515fc4c13243f94bba4354

SHA256
c08ea46914423626ae65a1780a0b8175414b51b98fb478bfc34b99f60f68cbb6

SHA512
b4666d710354484e7ff032edf271d79518bbb4762cbda06984be15bf618fcc0bea8aac9817c3daf0781dc5ecfd716ec04cd687c7f1a6e144173b45713edee29d

Download Submit
C:\ProgramData\Microsoft Help\MS.MSACCESS.14.1033.hxn[[email protected]][1].[8373001E-F343000A]

Filesize
1KB

MD5
369974d18c0a59810d8c045ffc2e2541

SHA1
f105fa4591468570a8abcbddd9f5bcd2c87f15fa

SHA256
8d6e8fceedf7b69a18867f178c0859c8c033b63f35607b901abdd93efd5fb8c2

SHA512
1ec6fb70a94cc7f70427a48c6c18fdd07896092105ab3505c65e697bdef3f4e3e19be123abb79954c69204d4c277e45147a996a87e45e607a274db235e6715dd

Download Submit
C:\ProgramData\Microsoft Help\MS.MSACCESS.DEV.14.1033.hxn[[email protected]][1].[8373001E-F343000A]

Filesize
1KB

MD5
b0b073c614c7448ea692b19632ef67d1

SHA1
dfb421d43f0be74812975d6030187a40a2588878

SHA256
eb37fee6f620258e4be0c09bc43cdd6656db286fdf5c5e4c9ae9311f8d2b69d5

SHA512
75f1ea37c560568ebbc6cd4d1caaea22e4278494d2db24bf9b57ab1ba502023bbcd49a9b4eae3a803e1224f46618d6451d7fdcc38630ce08d79b70e1b9e18185

Download Submit
C:\ProgramData\Microsoft Help\MS.MSOUC.14.1033.hxn[[email protected]][1].[8373001E-F343000A]

Filesize
995B

MD5
51d8570e971a9701563e23c1e3aca2be

SHA1
3f72e2012b3ab17b4c5779129ec557d59a68020d

SHA256
d8c116237f54798bf2b2d2af4b4fe6edccda13766326654716df9b5e3ac935f6

SHA512
eb3c5e40bb7a2205994933c753cbee08aa0818bb01ee3b809698583472c223c13bc869d5792825e117997a2fc63cc949332e4d9fc12742a8602d9f9cb4db2282

Download Submit
C:\ProgramData\Microsoft Help\MS.MSPUB.14.1033.hxn[[email protected]][1].[8373001E-F343000A]

Filesize
995B

MD5
1439c1fab35193c49ba8d264c35f9f44

SHA1
3c356df8111917c506bd167d0c9b5ed1de94dfe3

SHA256
2fea1f20413f362aed7815fb16f99179524f49391beae0507b67fd4ed804e8c8

SHA512
710d33748c9af920bea8f14d909daae68776ad9d2fd17fc5ce4b8ed8a6dbafc87e791ad9da7b7973facad5d4bd4e862c44cdf9182c1dc01760fa1133eecef96e

Download Submit
C:\ProgramData\Microsoft Help\MS.MSPUB.DEV.14.1033.hxn[[email protected]][1].[8373001E-F343000A]

Filesize
1KB

MD5
4f8da4e5e0c35c3c1b6d8477792a271e

SHA1
4b5be76095c75941434ae5accab78f7e637c992a

SHA256
8a9b0eacd3d70b976221be56925628ebda9c16677b8148a73685897f0f6c8af3

SHA512
29ec54b30ca1cc544e09855d5a9717ffb33f5d1f81e4b5bc5f90271ea715620cabafb1f9f263391948ff92a9bc2fd3fd467f3ec9ecba491dd2256372a4ec3705

Download Submit
C:\ProgramData\Microsoft Help\MS.MSTORE.14.1033.hxn[[email protected]][1].[8373001E-F343000A]

Filesize
1007B

MD5
0fc841effc925474b37a07c714a772c3

SHA1
2a33f998e0171aa17e079092c7b4e0199ebe0c12

SHA256
8490e9e174048bd0085fa633aafc583c4e9ee5a759ef90c326c93961c26f96d2

SHA512
c8d0e4f6b6c7201492c7e202ad3fe44f700a6f3e1607199d9aa5c43274fcd82c8434a8afb7ad59280a616cf8ef2761250566187b5cbb763704679219760d6d8b

Download Submit
C:\ProgramData\Microsoft Help\MS.OIS.14.1033.hxn[[email protected]][1].[8373001E-F343000A]

Filesize
971B

MD5
69c2875abfc672d3025530cbc9133243

SHA1
4caa895a4b57b821fa1216da3d31189eb0e4e5ba

SHA256
b6776d74c9b56115eb35afef80f6e5787a8de5481f3a99987b9270be381eeed3

SHA512
8b0f9bf4f078e699dafa3bc0fc85db839e6a62fbfa7dab11350496e7fade63b6e546cc983b7161b241ccdf40c72117647bde6578196088eeb1b22633e6786cc2

Download Submit
C:\ProgramData\Microsoft Help\MS.ONENOTE.14.1033.hxn[[email protected]][1].[8373001E-F343000A]

Filesize
1019B

MD5
67fdaaa60d939a36739366cbc419df15

SHA1
6bde3a132a57c10e44729390a4c9f294549530de

SHA256
56c3cd54288819f2e054cbc308a825e9660c570a7144202616e18a1313188a84

SHA512
734261850ebaf76b6bf4882f0ac54c68b2bc009a1a6facc00b6f08578ccd670aba3d12aac6be6a66f20e51ddb2fbb6604c6f58f8573251ae617bb765b37138a5

Download Submit
C:\ProgramData\Microsoft Help\MS.OUTLOOK.14.1033.hxn[[email protected]][1].[8373001E-F343000A]

Filesize
1019B

MD5
6792178daeef22267062c582d2b152c1

SHA1
4b971217574f4ecf08bbe2464034a46c8fb0bbb1

SHA256
56a03404f2e2a20694b2d23b2c16693441626a96080ce4bb9c1ff345a190cf58

SHA512
66179ae7b26184caef2097316fd1ec13363990890b8789b017c2059cf0539dc3e9b3005e9bb5dda94b401e83c6a9cab1c4fe1341b05f80a3fda5dcad5d3801c0

Download Submit
C:\ProgramData\Microsoft Help\MS.OUTLOOK.DEV.14.1033.hxn[[email protected]][1].[8373001E-F343000A]

Filesize
1KB

MD5
fee72e84ce4211190f6974bc1906df36

SHA1
2560ae75640948661a2a4ed075fac57a3ed83e81

SHA256
323c7370ba2df01c7103788d69b655ca3de83e2aad0f5451df0e2f87d8123364

SHA512
07c7cdb2e47c49c32459612cd899d718d9c42bb54a95dda8ac4d09740a31fb80ab7067c161994c075f0facc1117c4a0a3c3a77e060c83f6226c6dc750193a0fc

Download Submit
C:\ProgramData\Microsoft Help\MS.POWERPNT.14.1033.hxn[[email protected]][1].[8373001E-F343000A]

Filesize
1KB

MD5
3688d351599541d09f772fb38566542c

SHA1
efaadd5235dbdce73a68698269d42d5e68b0dfbd

SHA256
ffedd810101c0ea324b03e2b5119e7c321e435ebc3e44a16101838cb5c70c2e6

SHA512
87577d1fd3ea14fe2d74b73f6eddbccbce334ee92a961cdf59e69d9d720b284f8f20b58b040ef362cfa5dbdf26d4233bdb0ce2666358b1696d9988b5a5d24547

Download Submit
C:\ProgramData\Microsoft Help\MS.POWERPNT.DEV.14.1033.hxn[[email protected]][1].[8373001E-F343000A]

Filesize
1KB

MD5
b16eca96a3cb7ce0661d3e58bd57ea64

SHA1
0999650c71328d9f89e56eae542480adfb3d45d9

SHA256
03928243436ede18214baf20b0235dc728bf3842ee69c8250dd0c9969af6eff2

SHA512
450fdffa751df4fcfcaf31f8e5966534a5270a4125d97dede784feae607fcd4bc41a774a15c7e029639e581b84a906f6bbb351c35379a0d756feda1bf5f9e5b6

Download Submit
C:\ProgramData\Microsoft Help\MS.SETLANG.14.1033.hxn[[email protected]][1].[8373001E-F343000A]

Filesize
1019B

MD5
07df0b05e4f24073ecd2a0660c668d6c

SHA1
b9dc0fb50ce53900772e23ccce89765c1448d58e

SHA256
51fd80931422ebb17c59ba9afc6d1719bebeebd189d5b7db9589733743f52a33

SHA512
5bc33b10a853d38effa8ee7856e22d40012455c5a73f9750ac8647010cce94075ca57e159095e08caa034c5dad918998f6594183fd225a4000e254bbf5a645ff

Download Submit
C:\ProgramData\Microsoft Help\MS.WINWORD.14.1033.hxn[[email protected]][1].[8373001E-F343000A]

Filesize
1019B

MD5
1b1cc5a3e0e2e97d0d249c151361150a

SHA1
56c5e0476439f464c625b0cf2a072a46fa9f225c

SHA256
deea955ffc17ea46bdfbb1e4701b9f22e64d004ba7ff8714d74cc8eea5d94439

SHA512
06b9339eedf61d683397f4af0526efd59ed4d524fb225ba505612d2e231cd18e970efaa039a22e58ecff9dba6d7b038ffee909d3ad2fe4a24d60195c951ffbfc

Download Submit
C:\ProgramData\Microsoft Help\MS.WINWORD.DEV.14.1033.hxn[[email protected]][1].[8373001E-F343000A]

Filesize
1KB

MD5
2f0395640b552efccb81b0ad4c264fd7

SHA1
2d2cb8fdbf0fb295992eef4623e0bc342b5dcb6a

SHA256
9593401d4b15b2b5e4f26579f70ac88181cc6c8799cac8f33c8e23663ee8ecaf

SHA512
830835125c2617b7e50514f59a5f9dd0ccd2d5c066900d0fa52c8493c75804f7c1ce30da39ca1d550b891607182b0b3a8edaf95a8396dfc182c367045bc5901b

Download Submit
C:\ProgramData\Microsoft Help\nslist.hxl[[email protected]][1].[8373001E-F343000A]

Filesize
7KB

MD5
25cef00ede7ab4143a4f4b7715bce340

SHA1
4fdeb827ab036d822ed5d78f1287b39ca3f5dca6

SHA256
40d6ca34e76366af0339ab9082257f9b42cc3a5547b1cd787464714f1bb47103

SHA512
0a9456e5c83bcbf9fc53f453bea22e21a15d6057dadad9e0874a145b1b4a2e2fbc8496a2c54cff87def137db2e09b05283b7745d97257c52998965feddc62ede

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\de-DE\Help_CValidator.H1D[[email protected]][1].[8373001E-F343000A]

Filesize
12KB

MD5
19a447573f93c521b11af3d35d9ca052

SHA1
073f3d1db5b2051f7b7b9672e20ef8dbe6031cc7

SHA256
9c4603a4a2e4494d180613103511e86e7182dee36c0cb059424d6ab66ae56f70

SHA512
a5202252d6dc802466c284478cc9d1b4fe220630993e7045debe3edbb1ac3d7488bc2e9e5c8060a5804651408665aebe328413b889e38a03913b693854c3bb9b

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\de-DE\Help_MKWD_AssetId.H1W[[email protected]][1].[8373001E-F343000A]

Filesize
230KB

MD5
76465eea82b335fcd389e47cd2431e51

SHA1
6b08a6c17893882d6cb15d508712b9e805f8e17f

SHA256
69254a0f55edce0171ba5ead79c6ab88127c96627c6f58292b94ec377c9ac9c7

SHA512
ffef2c63fb7acefb4b2bd2b382f092bbc6ddf1ee5202c063803340821e449bc21ca1057de2788bd90a234f7510860f5a6e7fabf3259e6172521970bf5cd0f921

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\de-DE\Help_MKWD_BestBet.H1W[[email protected]][1].[8373001E-F343000A]

Filesize
410KB

MD5
25488d2d5aab4288d902044625327ed9

SHA1
5170af99d46d3ed33ea88b8bd51b9c21be214c07

SHA256
26690e4e6364ded20fe51a63710645e505f8dc156341596f5efb76062c9c722b

SHA512
993c97ecf9a5e3505e9d02071d2a755326590c8d7f3565e6b3eba7d375af50724f32a534aedd66641a77e0f35c451f255dbb8be2f05e3c48d1f48fb8da483478

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\de-DE\Help_MTOC_help.H1H[[email protected]][1].[8373001E-F343000A]

Filesize
532KB

MD5
42d9f6fb3bf9e99364a0b5ba0ccfe311

SHA1
7a759ef753bb27f4d1500da1ce1cf9ed29820186

SHA256
5f8b49d6139a936dbe863b28fa7c97e53861ada2fb5c3e82a762669c733e7861

SHA512
d5912f2f500e8c74a0a0f3c17dbb4720c706b17e67a203d83dfbd017ab2ba2d135644191412ffab1301fac1511338f10ae3c855c2908e766efe1e5bcf6e1127d

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\de-DE\Help_MValidator.H1D[[email protected]][1].[8373001E-F343000A]

Filesize
15KB

MD5
b54f04d23bbbac6378b68b84d82ee62e

SHA1
fcc73f190c701a4379ca99653024b410180c64ae

SHA256
8ebcd0bbd4f693d66473da52e78796996f57d307991816238baeb29391999163

SHA512
c851769f5cf932b59e5c614c510edfc4ecbe7540a3285fb4d48936aa09eda744cf0176129de639f20dbaac27061f8969c686cbf9a7c440d97f3bc6bd30b60ab1

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\de-DE\Help_MValidator.Lck[[email protected]][1].[8373001E-F343000A]

Filesize
641B

MD5
1cb4ba54d08c8dd8533706a55e6fc787

SHA1
be99d9473cc703dd9729aadbcb9d4610b1165e99

SHA256
932174c8724e8b5e305092f0f22c6948e54133f3f2cb69d9870d578e006bc4c8

SHA512
a9835b8371c33336490b995f37d130e5b79ff23c496a1b3fac7575720a6061e3fcca7b08be6a66b9aa9973a8c0a0d2865566bc8dad733c5c7794bdc4381d8cf6

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\de-DE\Help{45EACA36-DBE9-4E4A-A26D-5C201902346D}.H1Q[[email protected]][1].[8373001E-F343000A]

Filesize
1.2MB

MD5
48d171b7aabe56a3cb94e488c7b1fa7b

SHA1
fb5a2bdbe0178c197c8b6538eb03baf61bdc78f0

SHA256
80aade02eec22f3c59f688930db32dd9b6fd51005c6ab55d0987d0fbb4412762

SHA512
2b0a9b2574ed167e9c9f6d24467d7f446df63de2d083f9f41a1fe11e3e79e8c1033e35670a857a71371dfa9a1533b618e48482127d9c0249ef07d164622151e9

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help_CValidator.H1D[[email protected]][1].[8373001E-F343000A]

Filesize
12KB

MD5
ae5b07d7b1a0262c500f12329a981a59

SHA1
57559af9ffbe8eb00967a9ebd13c9ff399ae8377

SHA256
9a37a287ec2416fb0e8faf066982cfa889c247675892269030ba1d63e1adb2d4

SHA512
4bda0595aea16cfefe46d8f2db9d8c751834e3d86332642ee3a6f60dccf2df8cbdffe1ac5df983d7ec13965c8a021240259dc9fa9d85016014d360335f9045f1

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help_MKWD_AssetId.H1W[[email protected]][1].[8373001E-F343000A]

Filesize
230KB

MD5
b1026f8a65357cb81ee28acd71057f27

SHA1
8ad93097a544c88adf1e2356dfbbfc8cb03363a2

SHA256
c8ed550441320e08be03a833f9eb05c1f99685ee458b3a95efe08680ac027956

SHA512
86cc8913867b9d9fc83aa382dbd3930e045ebfa5cca27105c41c4f6cbe9d9b7a755b66fa0683399d597a4e3e89abd46cfdbf8dba37429c28843558b003ff773d

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help_MKWD_BestBet.H1W[[email protected]][1].[8373001E-F343000A]

Filesize
202KB

MD5
6b495a7f3c15a8ebf426a8fd1d7f4b76

SHA1
074d3365081237b806261a613e219e74158beafa

SHA256
0459c8ba05a3573564ba68b92a9cab4d3a9409e7b76b0493406c5724c8bfaad8

SHA512
99837be91e6c2cb2a09291fb680b33b9e8132193c56ce41fad8047c38934fe0343443cbc708ce329c6f88c655e9954fcaf80fad47e5fb307ec15bf1b10cba9e9

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help_MTOC_help.H1H[[email protected]][1].[8373001E-F343000A]

Filesize
491KB

MD5
aa594b4619f57a9de054f3b7079153bc

SHA1
5d7ee266298a6cf77a33f5cd4529817447237c20

SHA256
ce4fbc700370b1ca06366b94ad33b54d96f551c267891dc8e6c7d47bac3da0d1

SHA512
be516f29b59bc8d6e30a3589a8caecf980bd962d18dec92cdad4ea3e4a22a5e4101ad3b424f9ffd0e6bc2233a248a8c0808aab2e35d351cf6bee915627f3a311

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help_MValidator.H1D[[email protected]][1].[8373001E-F343000A]

Filesize
15KB

MD5
0ecf28f4aa02bbf3f879d5863e394681

SHA1
29e1cb42b3fbc7bb4e2b4baa1f92418859d80a42

SHA256
c0c170cc7c7c99d2e7990f1ac97d52771575981c6d9e3c79bf6f04359e005a3d

SHA512
6534e7b0cb1e48aa3095cc79054d1e10d971ff847adf087b21260b832a603c57408605bf3bceb32afdb4269fad368b71af50286b5830edcca93d7170a19bbe2f

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help_MValidator.Lck[[email protected]][1].[8373001E-F343000A]

Filesize
641B

MD5
af0369a2e725b535beeaf1b5d0471bba

SHA1
06b7bb3af64663b2bb4ec4697d331c5a742ec675

SHA256
64c1dac8c9b950f4ed1aad4565408126021bc752102582e28c67f1e2f04c3342

SHA512
e98196d5f322ac6136a029a953a7ec77b68087226667c46dfc18a5f8556ed0748ff17b439a5a68f2ba0a41ab07d04b8154364af5393837ce03dc0de1abd26a15

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\en-US\Help{9DAA54E8-CD95-4107-8E7F-BA3F24732D95}.H1Q[[email protected]][1].[8373001E-F343000A]

Filesize
865KB

MD5
3300de401142fcd79fc48ef0cce0ef36

SHA1
a953fc91a27d682704932560d03a22dee6bd262f

SHA256
222a9fc4d59186b3f7b134e138d48b3aaec6c53623f1f7346af1ca043949d303

SHA512
1e9c7a026b10fd56edb7330728b963ffd9ae6b3f0de6c24f15a6902966d233515d2279f891c27007ed091deb1ce16d6ad219d21f8f816d9fe2fffd6ce3d8c96e

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\es-ES\Help_CValidator.H1D[[email protected]][1].[8373001E-F343000A]

Filesize
12KB

MD5
0dbf7df41c029ce72d99fa286c36a6cd

SHA1
d9c38fb638e3d381e25993bc05f7d090878d1d3b

SHA256
1e2a4d109835f8f6e40cde5b8f367394f14e2ff2c1b3543f9ebb35842c70b5c2

SHA512
d94d25d1c57a4c9f93d86a8fc96551f112c50c0b0285ab08d4b68bfcf2608290de59614ba9cde7b8021d4e6cf8016c7fdfcaa1c974f103b904568d84ef54a7f8

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\es-ES\Help_MKWD_AssetId.H1W[[email protected]][1].[8373001E-F343000A]

Filesize
230KB

MD5
a4b1e45db3376244f3adf93d9739fb97

SHA1
5237f01f0966291762b90358831a0c1a43739522

SHA256
60e45c6a82f31f89da49ddc2acec370b7da41450c0f97b6bae988b8e9b0d287b

SHA512
cd8a8c1f1d1077c61dbd96e94f589b4298e68e0ab9cc291d12bf8caacfbc13f4112027660a687dd965c7da41a6732980544d78d24f8f5110b520bfe04ebaf40e

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\es-ES\Help_MKWD_BestBet.H1W[[email protected]][1].[8373001E-F343000A]

Filesize
426KB

MD5
87f8c558595d35767bd255ef314bdd10

SHA1
97386fd8ef0ef6265d308a10a5a370a36bd1e1d7

SHA256
effcadfd7094e91fa76624e0a5ae4395fa11a33dc4317ea79fc84b9e6abd5661

SHA512
1edf5f42a35e4eef1820a205d94e2f0faa919141af19e0bf46eafdc04e500f4d581328201eb8c7646edbd891d3d8fd0b1913d9d30e83754d094f805e2d5c558d

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\es-ES\Help_MTOC_help.H1H[[email protected]][1].[8373001E-F343000A]

Filesize
531KB

MD5
7c426b0a6b1e016bb697153305f92a93

SHA1
a0b1304944b54abd959602e1303ff62f8b955781

SHA256
cb9254ac1ce7b041b602a245116ed02b2b2789c7d09336b4a52311f4ae84ba07

SHA512
16c7775a3dd12b3add1da597629af7a54f21bbabec244ce6dbbdd6c8934cd9568e40a4898e5cb814389bc2e6d58698e60465c8f3f2800f6f6e121bad55b4a642

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\es-ES\Help_MValidator.H1D[[email protected]][1].[8373001E-F343000A]

Filesize
15KB

MD5
3f929a81c3e9aac310431925d1c162da

SHA1
50b9276afeff69c29ea4b4371d10ea60a02e2325

SHA256
4fe533408275e2541bda22be33cf07535908e86ae7cb8c9a3bc7c08cf3939417

SHA512
de1d8dd8e4ad300bf99e59f77977f3a081ef20a2d928c410e2a170736cb13d48fe729caa3859620830b519e499e58b1132cba56981ffc163197acac52042c853

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\es-ES\Help_MValidator.Lck[[email protected]][1].[8373001E-F343000A]

Filesize
641B

MD5
67430e550cf7f7873154110f839a6fcb

SHA1
3f707e0a55b4e285b2b492a11cde8106a16d62fe

SHA256
18f2a142f08ceb219cd92352550a5d8a89d3fffe336b3a99799c351b7b812580

SHA512
0f2f8b95c44d64f0b528fb1eb904a6db8ede298aebd7908cdd34dc0556bd1a869c1c8045fd1e08f54d8b6aacb2531c9701bd34215c272f192bf5699444000aa7

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\es-ES\Help{68DC71DC-2327-4040-8F03-50D6A9805049}.H1Q[[email protected]][1].[8373001E-F343000A]

Filesize
1.0MB

MD5
ecff21a5da7263d56f9bc7e92bda71ef

SHA1
bbf269cfaafa67f22a2ef052a8a0d5742f9caef4

SHA256
3a19c0874947afe74d5dd86ac5ee0eb26a48fa5f63739af2d8adf9a7cef5b54c

SHA512
246d5ee143e7d4b12a34adf29b7b7208ba8fa3bbe1b0ef2688864b49bb0a4204284bc723311d2d91fea1f98187322eadac071c0e166cd7e31eb871ac72a43584

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\fr-FR\Help_CValidator.H1D[[email protected]][1].[8373001E-F343000A]

Filesize
12KB

MD5
8b664cd613e8a41140210f423f6fab02

SHA1
6b7791b3354c59aaa60f95130fe958f7fbd36c95

SHA256
6f0c38361cdfbd4e7fbd87ac0b0af83c83077ab4094de6d972dcbff786600302

SHA512
39a0006748ee1ae8f3f38df274a907f42f2dd6c72a6ab0ec4b5792d49c230e86a7ca5f4edab6d1b9cbd05cc146812f141ee8b8d85af03aefaf8e4974ce1b9d9d

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\fr-FR\Help_MKWD_AssetId.H1W[[email protected]][1].[8373001E-F343000A]

Filesize
230KB

MD5
363dc1f894e4aef3a04c32960c57a871

SHA1
6092d3bed64180770a3ea7d39d5a471b3685efe9

SHA256
d98988e903e051bad564d12de783edd2ddc0ceb5bac7f2085c2cac90b8defa47

SHA512
f8111f8504513df8346261177e09a511c738e180708e1da48fa82769b2d00b9ff1daa7a0efb2c10fda7b626060d5ce3e930bbd3f5bc48f79b450742d0e88302d

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\fr-FR\Help_MKWD_BestBet.H1W[[email protected]][1].[8373001E-F343000A]

Filesize
422KB

MD5
bbe925a10d693c04b4ba3f767b9095aa

SHA1
c9a4a4470a29f9a561cb1fef80ece2b4763e0127

SHA256
184d134a4bad6c1495d3f0754525b28151f86c2131b21d1474f2f3a6de34b08e

SHA512
a4d2ca78ca88f076cb4bb9df39988a83293b599bb8a9ced111c0c514493552be78dc77b25e0ac65a91eb72f04d09caa0f622dcc02a37b049c4a8fd0c8f0ab91a

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\fr-FR\Help_MTOC_help.H1H[[email protected]][1].[8373001E-F343000A]

Filesize
546KB

MD5
d448bde14aafbde98c27aa89b2943486

SHA1
108d0486be8662ab1e052e0dddd4f9f16960703e

SHA256
ee81c68ac959a17106023a49416738b284e5038726267498a90f9b400a6ce71e

SHA512
f8b7dc8e8a142e49c088c91369f5e19d5ff0152636ac2171bbb49011dd02ed25a95976d15fcd7567d5ace626c081f807ecdd931adcd30eb5a729fb20f8b91168

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\fr-FR\Help_MValidator.H1D[[email protected]][1].[8373001E-F343000A]

Filesize
15KB

MD5
b269d250a428532989116961ba891b21

SHA1
9f8a0261d85135b26284ecc4df2dfbfc980d9cdb

SHA256
21fff2caf14a6fc82b4d8e238c57f728ab7a434c4eb3a4004946a81523a2afc7

SHA512
9c3d891547b1c08122e435048958415acd8229e868685781123069707559cedacbf08d54b6455db37dec7dad70536a93f78c6525696a53fd15087af640476153

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\fr-FR\Help_MValidator.Lck[[email protected]][1].[8373001E-F343000A]

Filesize
641B

MD5
7ae0b798887fcd537d57fd2b14fd3bbf

SHA1
36aa5ab51651ca69bd7b16efe1f0951697a9d809

SHA256
7d9926c3d561c0efd2a1badb58cd48999b8742fb5ab88c28dcb7d9b13ba7caed

SHA512
ad9375472190780662baa4d6f8ffff4fdf555da6077c5ed789d388e36c76d9ca1d1cc23943e5b06e516f338a6515be41b72dae5bb61708e557bf15be0495e0d1

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\fr-FR\Help{92F2118A-E813-4A4D-9DE2-F96A9DC02C53}.H1Q[[email protected]][1].[8373001E-F343000A]

Filesize
1.1MB

MD5
192ee77cbf267bd5a458b06191358203

SHA1
028980c4dbb5b4f6cb712b6edc879eb52b0d131b

SHA256
8e19959458fee967b5f4a74ff62f73b45810d47027175e527a92facff3d5c98c

SHA512
f77f34027c77bf2f169e7b21494e95519028345bc6a229c64b8c2e9a78cf8f7527969a798ccc2081837a0435bdf07829518f2d436b7da0fe8e915ca9e1dd92ce

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\it-IT\Help_CValidator.H1D[[email protected]][1].[8373001E-F343000A]

Filesize
12KB

MD5
e1f5c4f4c3322c30237b29339524d728

SHA1
1016775e5ddb4f877f02c95b8fb77041d5001871

SHA256
6e9e60978e465d12dc1e87e8e378cfbac6bc8b8676537a80cb923213ec64f2e7

SHA512
6f658455ad1fc3a705361db7ab524890db9181e019cb24bbd8f3d86965d5193d05c150b5c61fa841ef34f97bdcce1be6234e826352976c4156b5f381fb5fc14f

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\it-IT\Help_MKWD_AssetId.H1W[[email protected]][1].[8373001E-F343000A]

Filesize
230KB

MD5
2a6f92bd876f004ee9481c12fba0fc83

SHA1
a8c4c03f2bc3f87a0278fec8f158ecf128489da4

SHA256
1226e2395b52f1a4319b4698fd8d42ceeab81edae0475ba4bf94e853542e68e5

SHA512
600d9bc522c2b1998ad3891718a770a67c92bcdbc33da168bd37016f94f6ec25eec7d7f0ae133db8371dac2fb825b4d57987109bed47901b2538d6b0066eba32

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\it-IT\Help_MKWD_BestBet.H1W[[email protected]][1].[8373001E-F343000A]

Filesize
422KB

MD5
ace99ef63b77d29bfcb2fecc33e755d5

SHA1
f4bad27e1790248e9558fb6ef135675cc3ffe203

SHA256
77dcb5bc88781e8b5fce68c6e795585c560107d8c087e0334bd9507958e10776

SHA512
05af570c78b9a7e49c01ad55e4eb3ac52cafeafd6e5f3f2c52916af79ce8abf93cf1acc3cea52bfebe2e217d4e947df8dd4f67428b9b06ab0b67b26466fd6809

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\it-IT\Help_MTOC_help.H1H[[email protected]][1].[8373001E-F343000A]

Filesize
531KB

MD5
b644eb73820c970729fa03577beae09c

SHA1
7cfcb99afac3ec2f5233c0106b5c207bf9800931

SHA256
3a00a831f593e12ee0629b8baf95d2d7eeb750bc6d9a4ab6c5934a1597155299

SHA512
cfd92d730df5ff3e20665cd7e50f66529aa2ace04c7f5d589a35372f0ceacd3dafd439bd6fedb5a2256bb227d18945754f2d53d38e2d81e9f290f3e8a877276e

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\it-IT\Help_MValidator.H1D[[email protected]][1].[8373001E-F343000A]

Filesize
15KB

MD5
aacd95125a48a460bc44dbe5fe6c2a06

SHA1
1be9ba96a0d165d318da90918ca1a94645508b8f

SHA256
f4d7dce82d280e49b140ff2287a5479661c2173dd7435d1a7409f3f1f00028f9

SHA512
6f1efc9048796db48243295f727f0bbc5a213d3cbeb9d560ffe4c32ea4c43d4ad94410a1f5d305ba6ba7e22387d328ffc108d7fd204208cddafb3dad508c800b

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\it-IT\Help_MValidator.Lck[[email protected]][1].[8373001E-F343000A]

Filesize
641B

MD5
8beb589a2c2b161f575d761c8a9dd2fd

SHA1
75961bd61117ec8102a292c26fb7f3f44f1b792a

SHA256
4df00805e3f9fd1b614f702457fd93e6853855882da5ec6981fc4f822ad5c075

SHA512
863f8dc01a104b9af4b9b77c1f119b2f43115d03ed99f49a378ed8705e7a0f2d09ba16e9bb016d5f2214f5ac50102e3274e257b66c39534d8907e7ee3d0f540c

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\it-IT\Help{7E352021-69D6-4553-86AC-430B0D8FF913}.H1Q[[email protected]][1].[8373001E-F343000A]

Filesize
1.0MB

MD5
354409de566f14866fcdabd4a9cee2c5

SHA1
c96aa879c1aec673397d986bef13f266911dec2a

SHA256
d85eb32424fa09682e8af221487f2edc14a1bbf4a530ddee8c6e0dcca6ed3f80

SHA512
7c7ccd53bb15a87831abab95963732deffe65e3c431ecc77418fe81805a7f529394e618446664928e3c0b80bd1a1c33888f47a39005cca98e7682f41e38f9ce3

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\ja-JP\Help_CValidator.H1D[[email protected]][1].[8373001E-F343000A]

Filesize
12KB

MD5
11d063ace5d4e1e0c7fc14a8791a5c73

SHA1
34286d188c15beb29ecd9c68def1d977286fb40e

SHA256
19ed9da4d1c1fd59938881953d7822a9572c8a217b503854caddf03e66347159

SHA512
e38e9faf0290afadddb48b827bed09abfd5bdebd4efa950b771a0dcf3facd14f08cec2d900b1a586ab586105c801ba9013b8fda23cb5662c6dfaead7beb5e1d6

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\ja-JP\Help_MKWD_AssetId.H1W[[email protected]][1].[8373001E-F343000A]

Filesize
230KB

MD5
d5bb50ef5e8ace2e4abe0b2dd04b3e11

SHA1
5a475e1f15d6a5e5b310039ca0b53d607203e357

SHA256
ae20eb64b23b4889c45ab214e77c18018d891b027b68e7f650b270ef78b1b027

SHA512
2d882e4a48bffd0836c119d2ef6e9f3f9ccd1828de6b385ffee406b493596677584f86ef4b69f2ceb978358c4652177084bb3d556e5eadf47b8c67f51ab50327

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\ja-JP\Help_MKWD_BestBet.H1W[[email protected]][1].[8373001E-F343000A]

Filesize
358KB

MD5
72fec787b34765d83b8f89cf5d1761cb

SHA1
06e9f06c9c68779603fb4f7625c0a0716848c48f

SHA256
ccfce3af4e6fdbc7de7fafbf66cc45a40998a39fb2b94e02f4f095ba1129da42

SHA512
9a3165e60e65528a07b56b275a886a95b0968d3919a1e8949610888e4b43689bcc79a24ecc8e23c744cd4759d1938767a4d6a85419c73c016655da2fd223cb9c

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\ja-JP\Help_MTOC_help.H1H[[email protected]][1].[8373001E-F343000A]

Filesize
352KB

MD5
99092bd961f9039471c740eafb53a7c2

SHA1
eb1de03977dd786a2f405ccc2542762eea5650b9

SHA256
b6baab05e645de8dbf4cf849712f0d34e2ee45c5508ee8dac53133980948908f

SHA512
06bea155a079f1b453341695ec49f9f6b2e73610ee8e6a799a50daa6d95be1597238d01ca7905bdb484de52988b0723e4af09abe3f83748c71a1f5ff6348bea5

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\ja-JP\Help_MValidator.H1D[[email protected]][1].[8373001E-F343000A]

Filesize
15KB

MD5
ff78d2572052c7d44ff01a4d256322fd

SHA1
62df7dd82eccfa0019ca22490af88846191ab9f3

SHA256
76d9630e0126af03a5c6db7fe15fe775078c1f7c91031204fe37970a8f3c47be

SHA512
90a8b26d618822f16cdc84c8ecaf904b354c0a300a588bac1800a62c92cd868c99d21556031263de670ee157703279a4d07361e90bdc2d21db254e2251312684

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\ja-JP\Help_MValidator.Lck[[email protected]][1].[8373001E-F343000A]

Filesize
641B

MD5
16ea14c06f6ee77915c5472e2d441156

SHA1
16a5283df58ff7a7cb393679f9735f03d96b0dda

SHA256
7b778291dad3abe83002e368416ea1113caf9ce2d598a197fffed1f8c26b76be

SHA512
cd9d818c0f0bbab970fd9f1486b43b0c56b14e750cf3158f34383dd31517ffa5912038df28c7a214f247b2336222693dad4d3780e8882c57baa9b16654d741f3

Download Submit
C:\ProgramData\Microsoft\Assistance\Client\1.0\ja-JP\Help{E1E8F15E-8BEC-45DF-83BF-50FF84D0CAB5}.H1Q[[email protected]][1].[8373001E-F343000A]

Filesize
1.2MB

MD5
6e56029999462633ed83c8c7deb5ebd7

SHA1
98211c11e51c4d131c6262583f0c9ecc214c6050

SHA256
a302ee31df548187ce373b1595fe0ae9c939803b6a794a01b3a7954c7dac6b16

SHA512
9c2b074cd41d62dc6f3f482fa96f41617a37358cf8d8c048f02979edf4bdb455edb741953017a5a92316ba824401e4676e2b95ca0a57ed788c0b83cdf6f47b63

Download Submit
C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18\6d14e4b1d8ca773bab785d1be032546e_5a410d66-f84f-4a6b-9b29-3982febe58d9[[email protected]][1].[8373001E-F343000A]

Filesize
985B

MD5
ea392d2c4c7612054a74617be8d6e408

SHA1
6014d5bd6cb45ec76e6f8f1f617010dc3ff8c1fd

SHA256
e6c04c5a1e87502c80ae71f7d362cca8baa6db37cf833400541f5b7bd47681e8

SHA512
b2d398fc652119a6e047264e0579baa5831a66796768101495bcfdfbde0466bbd9e405d9f687346159150b53c00b7653e9d6874de010a57fb71cafa0df6ef0b7

Download Submit
C:\ProgramData\Microsoft\MF\Active.GRL[[email protected]][1].[8373001E-F343000A]

Filesize
15KB

MD5
a0b5ff9ffb99d9d5bc1e9aa420dfec1d

SHA1
5301f60ecd6738934ec4c7368e8b971e658485c4

SHA256
c2b02d6a50b638507e06f4110a46a4a4d1b1432fa3e986fa7b780675ed9cac56

SHA512
af2d0eb7dc0e1437567a9e6fe553a7e18945c2a3570b3f396d5a8ce8776e0afe03473b2bb9b977eb41fa2f47f05549649fabb4eddfca73fb7f7fb348ae5377c4

Download Submit
C:\ProgramData\Microsoft\MF\Pending.GRL[[email protected]][1].[8373001E-F343000A]

Filesize
15KB

MD5
b9e17b7dbc0be1bf971d6dd163c9a7b2

SHA1
aecf0e60ff80d28440061f4ecf585aa441940d84

SHA256
b19c2087e43c83684af07a213a83dfd0c380e40bceca189d972ad76ee50c6aa9

SHA512
8a0fd84b1d79dedb07f2afdb4845a73b0c0c9bfe29e83649d7f331c5c01004a444a8f6cbafc522a9550fb799c965e78af5b559a38a825311f46fdc0bc9f9b61b

Download Submit
C:\ProgramData\Microsoft\OFFICE\AssetLibrary.ico[[email protected]][1].[8373001E-F343000A]

Filesize
5KB

MD5
ad48f8b5a8590d40cb0af73282a44ffa

SHA1
5c2ffa8f576ecc5b6fff7e10b123dc9522ca5e57

SHA256
1ee57353d26625d7ccb0a7635d618cee2fa6ff1c89b65e6aba2e95ae13be9671

SHA512
27555303e3487044b55d35296ab1d84da51194cda46e32588cd87ca0dcbf4bb6de4d84d58b70ddbcfff822b1c15b7e2a7036a76e94936e07f926c3b612e96fc7

Download Submit
C:\ProgramData\Microsoft\OFFICE\DocumentRepository.ico[[email protected]][1].[8373001E-F343000A]

Filesize
25KB

MD5
be7811251c8aecef6e5849004a481dad

SHA1
b468faedadb3205e9bfc9e6c32f52076abbe7e67

SHA256
c2662c4f5852f3fc78ad8d9c117c684900ee7fe0120d97e888e4192dfde1841c

SHA512
d29ed52488e051dee16dba048fed49b844ac4b640f35e64c1dfb93f40ac12a254560cdaaf01d60430cae594710c5ece9a10a1b561c586092cb7b7fd5d9f2456c

Download Submit
C:\ProgramData\Microsoft\OFFICE\MySharePoints.ico[[email protected]][1].[8373001E-F343000A]

Filesize
341KB

MD5
0965dcb818252efc53461c61c666413d

SHA1
1ec09bd21a4b868b9ad47d3bdccd4e497eacdeaa

SHA256
54ab23c153fbc9a3198b6cbd56cce4ac86ec97e6806d0693fb4299083a1b07c7

SHA512
a51ec1f30b569bfa321037ec4377532cf76d33858dcc7d90eca095d96f677a11df37233389e85a69c1a0d0db8bc45860b5f86baa563ed18ee095073f2e175973

Download Submit
C:\ProgramData\Microsoft\OFFICE\MySite.ico[[email protected]][1].[8373001E-F343000A]

Filesize
25KB

MD5
cb6e67b2b9620dc11af898228fabc09c

SHA1
fa1fa7fb1c3b020096d20504fc757168f861c117

SHA256
5b088cdbcc8fa1d61fb583b9257a8aa1b8938524c440fca1cee622ca2226a27e

SHA512
b6f2af1f0935f9ed3a40452c9d020b1d53897e4271f2580cda089147e0a3f8dfcac1ca8ae392ef87690227ddd80b0dd571760e55b1afb9066e2144b8f16e06e3

Download Submit
C:\ProgramData\Microsoft\OFFICE\SharePointPortalSite.ico[[email protected]][1].[8373001E-F343000A]

Filesize
25KB

MD5
1d310b6f8b1d6c5c0ffbc8ac81e43812

SHA1
e850c126d475353735cdf240323351f90a6db736

SHA256
95080149ead3b97e1ea24b2aa216d86801417a534faee6b3dfb31803901441ca

SHA512
f82a2aaec688162dbf2f10cb0b47d23b6d2974e63df289cf91004ae7edaf9a49556a88b0b7d36196a17ab36517a2f8a00ceebfc9141e898e0474451d78d829da

Download Submit
C:\ProgramData\Microsoft\OFFICE\SharePointTeamSite.ico[[email protected]][1].[8373001E-F343000A]

Filesize
25KB

MD5
d1003585a4df3ead42482d6b3533023c

SHA1
2aafd44d1d9f71131e59437d0d760d68931d67c0

SHA256
d641a4520432290228dccf832d2da4f5881bfbb39492c51214d7d901b55d76f9

SHA512
d6c11e2d462bde99551be26214337248249201971213780821944e2eae15c22cb51a181b6a5099665ca7d3718bab3b5a31aa4a6241e4453b8db6de65adddf51c

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\ENVELOPR.DLL.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
14KB

MD5
2a9589075e12b0fb112da8d412ce8ec7

SHA1
47643d01c4e1e6314a84f44e1545fa7d73bd1841

SHA256
625b11decece37704d804f00006ad04049f1d7eeebb2b67cdf31dfda61a986c1

SHA512
8b1552c9c9bafa3f8e7e428752cddbb64c00d298f09a88c20ae8ac93c8e1bd18b7d3c9e58a51e33bd8549e84db889897fa01b05c91baa5bf4ecf67aed1d7e16f

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\GRINTL32.DLL.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
48KB

MD5
57a757e515c6c4efad927a4ab0b5c88a

SHA1
48482b4b02c35d0f289dee6fc4066156342b6061

SHA256
fc9b6186d61a47fd10e609ab0f563668b96cad78a5be2c209d5a5867a36b84a6

SHA512
4a000cdd033298d817dd81a3048700289d750c2992575ccacd7e62ace1a54c31c250fd205521e6fa5c8094ef4130c69c2a6dffa9664ce7ad0772c0049b13f7c2

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\GRINTL32.REST.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
246KB

MD5
4157c3d9116acdc6ed2f72ee8a070181

SHA1
3368f5906e195cd5884ba60d8fea5f9609056975

SHA256
02824d3c5a9e2940862adb0f03f150d5c13f58faf65a6f11c1826972b86ba651

SHA512
debb0527027d56e859dff13ea6f4e214cf5112418e78936322403e32237cf117c2c05d895577438ea2d4f0958979b0492df384f26136bad9a7d4100f5ddbf049

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\MAPIR.DLL.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
296KB

MD5
b018f2642805653f8dfd9f37af22f491

SHA1
06e2476b79a473fb7410d9db9286d9f9cfd16659

SHA256
55b5164a4596741239785106960be4792e59fceb8a677c30f1051bcb91d858fe

SHA512
8c1d0ea7ad6e48b9adfdcc9aab1c810c36534653ad1ccb0efd2d4ef43ac5ca763915a4870932a9ca89dd22a2a79607e11f97f9eb8335f72d30feb4ea9a5ff534

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\MOR6INT.REST.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
48KB

MD5
f8131fbf6cfbeeee52c103aa37312acc

SHA1
f6a9361945810d634b97bd90b71308a2bb698664

SHA256
ed28ec04f95bb47a3ce20edb0ad3ddbba19bd5e23fd81e0b234ada6d78e5470d

SHA512
78894b08b234763c859d0b24e56f51549de35dadaa0a24a27d49d483254688ce23e3143b195586bdedddba2eddd1e1c2d109781540b5792a96a42e02d8b1fe86

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\MSOINTL.DLL.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
94KB

MD5
abf3ba52d57cc611a3a53cbd09adfdf9

SHA1
d0793008f6b69842fe25858c5badc2877edf3fa6

SHA256
6decb186057893a6189324594aadafca0f14c87faa16227cd277eb48f580d82b

SHA512
f2a72319264db27901b53091cd72070cfbd78dda3651ad82b59b1a9d5e15a02501cd370791ecaa38bb0c8067aacdbd8bb70fcf20048707196e45d1e14fab69d4

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\MSOINTL.REST.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
2.8MB

MD5
3a0f86c6c618ffa8d94f03d0b9bbcd0d

SHA1
75e1d070cb2aa46410ebc575bda06ee902285723

SHA256
43f284ba4e77af70c4d972befd266fe63062cc3de26f05a93a1ca9b8159ad20c

SHA512
b5d48c56489a827675ddbbafeb94f266f5440e0745bea3f18242a521d2339137ad5fd32c066b231c22f95a75aa3402bcd16322aaf8ae6ed704d72a16a61327f6

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\OMSINTL.DLL.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
45KB

MD5
24d5216ffd4fc8b6d1094e5cffbe86b6

SHA1
44616eaaf7f4ba5ab80f2e874e1806584f8b1836

SHA256
bfe621bdd07f7796ad439868f5504185caad9f8ce13309cd87b34eebbe01cae9

SHA512
ad288a37b9e9776fde3fadc54b79a22590e6bb6e087f6ab76ce52f69f1b84c7b83d4b270f838f6b1df2a12ace61248e604ede75e84fe08658c43200d92a80cb8

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\ONINTL.DLL.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
31KB

MD5
5d09267a8fcf697e13ad592b7d2ef9ec

SHA1
8229f03f1952da22b430a60c4bb0af83f83a3527

SHA256
efddda7e9693a821075e7189f5714e1c1f0a960bfb3c8ba357cee29543129840

SHA512
69cc7e674f890f1a4ec9fb83e1d9ce732e2ec0909169244db0899d80030f276ff1f39c731e8e9fff3f8765a1f703feda70db11de92e90058444a4890e9a7cf06

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\ONINTL.REST.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
255KB

MD5
11eb5141964cfcc2705c906884ed3178

SHA1
7e2b1af503177a93c37d5776a67b470d6fc1c01e

SHA256
512d73fa7ef817b2a8dc4a94b11b4826f7db35298fd2b49569d6c9f761c65022

SHA512
b2c291bedc0d976f042eb4af77bb9b406fa83dd2cf7717d3811953d5bbb923ee5852aaa51234f68f8957bc3999baf990826485e19037d15222317dc5124b6ec9

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\OUTLLIBR.DLL.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
221KB

MD5
58169e14fc4c9bb0829be694a76434fd

SHA1
1311cf8ac22081a0386b0e072a2029845d35502b

SHA256
604ec61eb1a94e2c818a44cffd35e039b2e1ffdbab2e6ad45359601236601dcc

SHA512
152953ff309c71615a88e6f9addcabff840c1b70c5ebf97ef6e732170ad50daaef997fedc72df5b82258dfe57a3906426e5bbfeac99e716f4072f36168f5d727

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\OUTLLIBR.REST.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
665KB

MD5
8c9f8a3993ce40b1239787478f796ac6

SHA1
c13c91f91ce7e84fd543f1594c3c5346b6d6d0f3

SHA256
20d5af200ff220ef977b306837c739e673c6e09c2adeb1b70e032fdf9208c76a

SHA512
c52d164e64ad1058df1d74ff8f276537738ff656bb46d91767932c033019e2ad85eb28956b4fbccabe4f0e19204f7103216c32d1b7b838d0fe387f2d0edc8e86

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\OUTLWVW.DLL.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
11KB

MD5
48833131de386f5c33dbc8adee168063

SHA1
9f024b885be458aa18bd3f79e91ca8c01eaf2807

SHA256
33791fb1c64a0995f7ba58c7a33eb605fd1e1d4a0bf0ba6128be8686255ecfaa

SHA512
a6544c7529aaa3a6dd497bd72a8e94a1b082ab35c68d3538bcdc7fb06542f5d28b86f30159abf583496d57ae06ee8bf8d88a1940508f4d788c34d0ffc53622b9

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\PPINTL.DLL.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
51KB

MD5
708bc0a204b8ef525089bc52aa5ee581

SHA1
e93e23b528e021e8d12a2a9e04024f2172ff1682

SHA256
b456fbc2e2b252b4e99cec0b93766ce941659c86e8cf2f91db52f6d8cc9be8dd

SHA512
1be3dfda50659b5435dc3f9c26401fe6d7d35c7e270ab70c4158c4325453f1b3180e1a25fa23a108f62fed995b2212fa47ccaca67e279f2497ba9f7aa34c4f15

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\PPINTL.REST.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
280KB

MD5
07c1f463269940e7a49bb051df8cb08c

SHA1
d17d5c84a35323378df2735410291c6ba26798c8

SHA256
b0be2df46891c7f5f43db9627b1e6781c808df8d5e8ddb88d9033e3242a75a68

SHA512
d453b713e1a176f3bba75fe322a1caaba2109db6cce81ccf0b15b5e0cc16981d398cf283182d906ddc2b4457e47021df57a4d44dbda12bd7ad8d5a2e94ca2828

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\PUB6INTL.DLL.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
105KB

MD5
877ee92260b7545992a23c6b5617b650

SHA1
41ef344db551f592ced49f6f29ffdeefa36d34b5

SHA256
512312a081f374ba8431eb17002a182acd625aa42c8e0c56129d0107824641da

SHA512
1eb78dae160ebe4ac8baa1dd77515932ff175d7c1cf5656381b37826546212b8f381fcaaab8865fa7fb27ca50e8b49fdc712a9a1e35c2ce889279a7d3a10d65f

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\PUB6INTL.REST.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
568KB

MD5
b2a176c4f18109b04538a60ebf9bd6c2

SHA1
94f68916f89249de1283bc930a07c2dc4b650e05

SHA256
c6dbe02caa9b80b1399ccdbf48781069d54b388abfe436ee7316988a285c8d4e

SHA512
672e021eb7136328e224f65fd997a11be39d107a6c9dfdccc401e1d5a46d0a1d0481d7d829e7bbbf53f71935849b212096d6bf7cfac9e9f1d195442a62f825a5

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\PUBWZINT.REST.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
363KB

MD5
3f44e5d22b67e49455a655096e903763

SHA1
9348fcf1b110470050ba2b2d4b0917628c82b42d

SHA256
5f685f91fa7a1c5c938cd1634647d57d75663c51fcdf944ee99f30762cc58dd4

SHA512
9efa47cb274fe001d0ca156b94366d44344cb26ba00b64a15bfed517be3b34c410ddfe7a2af12add77cc86ac8b03f14a752e848b1dd1e051a4d9240ad11b6e42

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\SGRES.DLL.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
13KB

MD5
afec68386000bf3d25b0f7421f4d60fd

SHA1
38451db88981265713904fb3be3f55a606e801b8

SHA256
970e20b053a9fa3d7c9a79ff2660e3ea7d55430d3a228c551a4b9f0276c5be7d

SHA512
d395ef599cd7ac9bd28a34724d80268fe83da1ca1cbdb54594eb1cf8d1f9ee699e05d33c8c0eeb5ff5f20383150be50c31b5c2a74c88a253588d4b1ec68db3a5

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\STINTL.DLL.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
16KB

MD5
b9f17d6e08e27f12262f1808ef5b4483

SHA1
ee001be15a0c76c61ea77d747277a83cac6fc7a5

SHA256
44c3df532e7ddf76e1a7578abe3c9da83c06b21ff612d60085032f4eecab458c

SHA512
cc52657157a5e0cae0003f5e6684afade0c7c628c47dc301ff32fabcafd6fc49678ef8f87cab0a1704b5bedd1988660b89724a4ac62c6bf180f036670920963b

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\VISBRRES.DLL.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
26KB

MD5
09b8b1898595748d268a0fd7233a406d

SHA1
e73e18ae45b26d96d321978249df35515582da08

SHA256
cf97ab76cc42136e98952dd470ca29bc4bfffdd9499954e5510ae87b5223efde

SHA512
53b427a8058b77b808062fb2c224c241713b4e84e41f427881c62114d62de3bdd9f35414d32c22cf36495bd54a2f47a3f9173f5e2221aa3b469c7233dd4ae4f2

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\VISINTL.DLL.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
477KB

MD5
6f4ba5942b090945455cb69a496b8a80

SHA1
b19b8e47f042679405a7792984702a11c2eee11e

SHA256
5b89851c939501091b94d28938e1f7c600ed5b14da7fb3bc7e92e7928e5de155

SHA512
d69ed270a306623bb3446d306acb16d63aa015c13704f5aef960a3c1b469da86124b2c326f0b19429f3b78138c0c2098dceef1188b3c3556ecc6949170a631e9

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\WWINTL.DLL.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
151KB

MD5
e486bdf1611c90dddca4b12648e29437

SHA1
f7175dd3e3f4245d90ff90360c7a0defc8bf825f

SHA256
c010ef5ca61568d4f9320ab70faec7161e27aa785f54a846df49d5e13445825d

SHA512
3fa55b339ccd9acba8345dafd84aa775e654844a9eabcc25e30bb549260519390ef6d2079b9fad31b05c64f56a4f303c385593e2ab4f5bdd1e34a476dc8f28ea

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\WWINTL.REST.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
1.1MB

MD5
b1442303fd1ac76940243e93ec20b00b

SHA1
79db6cef73c600a52f0a3bbd6db93a063946f5ad

SHA256
a9e43cab087c8d05cdfa45596e0aad71673882e8d1a1f1184b3eba0db919a5ab

SHA512
57f5183c13f9f1e126f6442d550d9e6feb55ef5eed5773c0ecb0524afa11cf344fbf35fdff3c882e9e01244df975e0f848adaa208c7285c196afe9d97eea96a3

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\XLINTL32.DLL.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
149KB

MD5
3276abf3cfcba1893125cc60ecda531f

SHA1
559b17cb6d395fdad73f4d5ec35afd5b48070039

SHA256
3f7dd17e934783a92b87bea63306836be997a637a3bf1dcf7135e1e547283928

SHA512
5df8311969e5e031f79fa34d7ede0ddc59184212fbb5b1934cf8c3e46c1bb79519cc1a629c6e50e77c2790f7db75804d7d958f32d3fea25cefd272c34adc21e4

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\XLINTL32.REST.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
1.2MB

MD5
9bbf342ffc44f21c39afc6fffdc92b80

SHA1
efb14834b7566669d67d8e8a16417fe2197bd5c4

SHA256
c3c3c21be4826ebe3961efd8e4289cb4c4a8c85b8cf602d3d4dda5c9fa02165b

SHA512
58770cecfa6a5b14a856f2cba7c4c083132a516cad94c3a8d7d4ead9490f210f471be9d5311145df849c5a1c8be98097ee23663e7a32b04b41e0d1599e09d2bd

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\1036\XLSLICER.DLL.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
15KB

MD5
51399857d618551cc5da5beeb473c1af

SHA1
6c60a5ba239f0b2dd8963bffb3897939dd49f591

SHA256
af63f47761da42272ecb5dbab76ad52359266d1c1fad81cd68a566f8fd4973b1

SHA512
8e76e79382aea13774d44876d52a33e83f342b90a09ddb6abc6a728992376be1da1439324374338711ce126e559ac15dabe460aad5d9251557dbf9c6863fcb4f

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\ENVELOPR.DLL.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
14KB

MD5
88fa94c41ac1a8940cc719312f789b4b

SHA1
25c03f7b4b87365149d41cc74dd752a3d32e0b34

SHA256
dec7ec0ce0c63c5e01493f61c4df0ce4610c7996e596c5be9680d5cd291dc38c

SHA512
0a784f18e99282e4eccf19b5883b7a6bc2fe12fb5a0d7ba0c95cbb874c00368c66036be30f20254bdc9ce64b010e467284f91c965e5070203fba648ae5df7b37

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\GRINTL32.DLL.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
46KB

MD5
4bc7e01826b8812573475dbcd591d1e8

SHA1
95e904b092eefaace69f360a026d20d5992e4461

SHA256
ebc2cbac104ba7041667a74e3b1f01c7ca214cec741c0100b9343c814cc0cd30

SHA512
f93ba7f001d5d9357aee6f047b9d253df87fbb6333c382480721c63cb6075e65ade2da57374383e801fdfa8ed4103d97fba114bd39c7526291678e23fab620c0

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\GRINTL32.REST.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
230KB

MD5
b152fcefdf00394a34ea958bfb3e214a

SHA1
4454f936600a4df91756d35404c65a378129f77d

SHA256
62a8b8aeac257ddbefc922ef268d1636728c535d75df027c06ff7e6743ee42a0

SHA512
622375f1be3debaf7c295b86a015652e6269a2995dd1d39be500a3daa067caaee7c81f32aef365f7a469c129ca7a16705238aebfe2e505369fdc302b0cdd206e

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\MAPIR.DLL.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
287KB

MD5
4003a2ca7034b0d9b0c3bbfe52a01578

SHA1
7df1df560752c1426708c8b03e27565dade6a9ae

SHA256
08215c86db1ec111e215a717a7e798dbdfdbeb0bff2f161aaa6fd01c95ec0f60

SHA512
e3c0a8d107c42b6acf11bee4a029836aea04b87148ae6956b1f4fe68e4ab75203b77a9683260238b9660a72e4213c01152afe257977ad26806cacd4d9ccc30cf

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\MOR6INT.REST.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
48KB

MD5
aeb6a74fb886e469b612290efe8c7a87

SHA1
422d0c2bbe3b6c40fdee92d15757613f8ab44a07

SHA256
1da453285254158f73ef09a10660c056f92ff2f64952d6d522b322e4d93599bd

SHA512
660233f2de8d6df046c268c4597b443d05ac5799262e65caa9c6fcd85c9df4a1698b3ed2153e65a636df49cafa9f89261a4b346db611aaa46cab7de580faf518

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\MSOINTL.DLL.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
92KB

MD5
6856e56cd7d80d084b6e92b5296ebe10

SHA1
f407f7c39454cd40b3ae2e0b58e0e281d1cab9ec

SHA256
072a0673bdf9b448003f8e271efc9eb2337fd635660357707aaae0a8d1cd7ecc

SHA512
c2eb49c692dbeaf6ec280f8f9e7916a074633f0666bc96d058235990664bba0f0738e017e87e4ba2d7b64d12deacd52a39479e24e7a2cce3867c38bc79231b0a

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\MSOINTL.REST.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
2.7MB

MD5
310d6e0d1a57a65e1888b075db099c70

SHA1
1e1385afe644a993b53c75dce94443c86136fff6

SHA256
3fa62b34f3a896a6153a9ab5048ed30947a5be7cd6ed970a8c0ea10340ccc906

SHA512
4207a088dde8cd8cd3eb858819011ffbc14c0fb0215561cebe41ba1fa6c4315e9c13de20e20b30abb042f28c1a04615782f03140473f2766ce68bb8182801c5b

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\OMSINTL.DLL.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
45KB

MD5
af22cc6e3c41b08217edce34ce0f27f1

SHA1
48f885d108b767376ab2a1c336d9edda4af7fa21

SHA256
cb186fb72f7b9d86a98727bee945bc30f033bdd1cf7d0c9e7ffcad097f7ff225

SHA512
d82115789a296b2e90645be57057f2ce22677547d9db2ffb3f722e835b8c61d08ec999c2d9fe91bcec6f4b37eba72bc6423cb94a60ee4ebe6a2a92f29f7fe9a0

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\ONINTL.DLL.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
31KB

MD5
185de4c905de690beadfedf90baec270

SHA1
d97630d7a08ed444396db174a5f84a1f186e5f7d

SHA256
b7fb475627bc590599e838db5a4ed65dac801c10b707fc971b3a92b43a8e5448

SHA512
f72902b52a63ed7457b45318ee55a832265cbd5d234a1e4b4c3ee51167e70a1778de3d06ce4d27d05cb54c73dd6540b79e0a63fbc80d104f8bac16e5325beaff

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\ONINTL.REST.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
246KB

MD5
51fea7ae8fdafe4f05b0ebfcb48cd08d

SHA1
7067a0125cd8bb8761cb66b252d1741510c0b0ae

SHA256
56fff78171db67605193c1223ff6e4f3750ad2c963c074823eb15bfb0b4fb869

SHA512
deb68eda649c034629290659da837018bd863261a14416ac42ce087e58d51229810624b0679fdd3c52398a4d06b4284a20d09b039f7996bc205f9694c99c22d2

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\OUTLLIBR.DLL.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
214KB

MD5
d849bae9690e9ea186013c7a667c3743

SHA1
0ed95375fcc2633837486284cac1581c4415905f

SHA256
19fdcf3aed47ff37e4fea439cc4ca74418f4a565837066ab0104a817f530f2b9

SHA512
b7635493581ac4e4c38fb4d8fed006a0485417443c052f9b6914e71749fee0fb3cb5de2048f3a1fe26bf2e89e26cb53a29de5f36efd8c1f3c46c0c23bd144a9d

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\OUTLLIBR.REST.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
637KB

MD5
7dcae3edb5a2a908044f10ae53402492

SHA1
564418d2c2b2bd473a9cb3702bed660d7a85f7eb

SHA256
bb1a0d49e47fdd9a0bb895e1147f31e48790c0d86649169a3ae54221b9ea8c44

SHA512
e5c57ed15b9cc97ce6de9a9daf14aa0c61be750dfbb2ef33eb53a5ad511ba6b7508d2f2a772c672b1cacc0879b86b41a9fb0fd4f9b536015db900d292ade67ca

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\OUTLWVW.DLL.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
11KB

MD5
e8ffd86eb8bbdd076b4182ae55129e42

SHA1
5cdf7211c9d23902b60b47758e7940c807ebcdd8

SHA256
f7f9d5de57dd432f358d2caa48777dfe29cdd8d72b174e30a2406d9f611e8dbc

SHA512
db9051f741c6a762b436a9f0cf7602f607b1a4f03f9d7872e322087282762c06fd81a903977ccc41fe256e5afb25f63306baf3781f6ed09e0c0c18616ccefd77

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\PPINTL.DLL.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
52KB

MD5
a307d25949cbd4a7b0b5a66fd63770a5

SHA1
d416adb23baa40a4ba74392029f1dbac8000a5bb

SHA256
c55baaefbb4131638b9b65c5a1d93f6fb3b137b432ec396dc2c02ab3bc3e5a39

SHA512
b6a415d94e38d4eeb557788f7e647836d51071200c205fa816057219f71c250a7f95fa79a45f1bdc1853ae0d124c999ae1b3a2e4420270d4dbd12074330c145f

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\PPINTL.REST.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
269KB

MD5
5797a88d1aebfa79cdec644421cb9733

SHA1
1d37a7ac0e7683e39f84ab2679f03ed72003b66c

SHA256
bd63a74274ec599cf2b3acc57fc5e4f0dcfe3a4d9a7990281aad7c7989847881

SHA512
6676c6472bb163f1a777d83e4c22e288c1e9dd1e778bd8812b42ed5ecfc3756b359b77574c7e120068798cc952695f9f02410108d15b618cb9f4389aebacc783

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\PUB6INTL.DLL.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
105KB

MD5
c937928864f1383cdd871b9e30ceadc0

SHA1
e57cac1ac52f15263ff1ef60c7cb6f4a2d970f05

SHA256
c9d7eb82e6d7a166d150ead98b221acc285b6340af121974cc2407d5d3f32bf4

SHA512
6dd75cc1d85cc5b8e29aacab5c48a3a1186c4ceb781fe1f1a2be429dcc0f95d161c50d7a17018f8fa2a0ddcaf6fcabdf1aefc66101fc818621f9afb400e6eeff

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\PUB6INTL.REST.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
544KB

MD5
6ff0976e2912a4f77607d49955ca29b3

SHA1
408a6b5a1c0a4775b92ddbd23d8bb5ae7ca0ec1a

SHA256
7463c18d76633b436abde8991c19f6de00022357bedc96e2f3caa16ac56e22a1

SHA512
56a83b1df51e83aeb0f0603da5e3a42646016e8d854bed28ee8f795225fbe62ae382e2d1efe501c7792d43413a228f867cec59af16ae5415d007027ed628432a

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\PUBWZINT.REST.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
352KB

MD5
53332dfd19c8f608830d01a30efbcd73

SHA1
63fb8a465972abdc7dd7a4e6b7d3f83e7787a96a

SHA256
b643ec4fed93c778f2540459586d5423252497ac28fe80124992f0047d0daac5

SHA512
4abfd65ea4e6f386a18c1ed8c5ae5850d6c1b3459f1f2b324a21f9666e2e70db8a4f7d740f63c909f3a7ea256d9ac9c733abe4cc1fec520422bfd215fb20faa7

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\SGRES.DLL.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
13KB

MD5
bf6cfa184b50e8f176ff97a8dc9b1268

SHA1
59d4f974a050e7640a3cdd8d9d40f99c34273c14

SHA256
1f85b411121c94bf8497c2322e9b59583da68d33db57916a3dac4910b45265df

SHA512
6bd03c8b6acd6825bc47d1951f48bbd348b79735a707203ed8a08bbe0d004a1d6db16ffb24d73c56f9a9754702ffc190d430d0c6b0e2b1bfd9117226119cd152

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\STINTL.DLL.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
17KB

MD5
bd15c535b924a593e235d72e8450afdf

SHA1
f8b3af804a378b1b620b56a33641fa2bc6949aea

SHA256
3c0116155de7fb0eb78d201126ad944dfc43ff9ca5871ae4654608e007c1a5a0

SHA512
7afbd8c34bcaa3255587ce77651a6dee385ad5f8fd1931e7f05a2f346b36807b4d23443cf8faa91883da6c8d0900458656564b80e73697d1c52313f4ea748677

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\VISBRRES.DLL.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
26KB

MD5
5133f03fa45689dc40237c9309203f45

SHA1
4f464c977e54715dd168050eb45347e862e79720

SHA256
287eb1576a94aa35539d86905771201bbbb92cab348d38c82cfbe1b18395643d

SHA512
3bb63df4a55ba3c844d54856cf7de645f22d1213396482bbe59c7d9faffbb29c05d442130d47d42045e85615508bdfe3b0dc1874726fbc7b470744ccac8b353f

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\VISINTL.DLL.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
462KB

MD5
8c2e57c7a22f7ef09e041ffcf16892d0

SHA1
3275c190acb54fb7e975dcec7e9cac080731818d

SHA256
86783769e8cc8aa54ce72993d81ec3ad43e7ff90e36b6ed827de4dd794f9c5e1

SHA512
d60e64a7f94f844bf2998d10ab8bc273bdb667ab57077447561d10cfd6e3083c762e84f2bc9476200b0ba8f08a9072441ba00441bf36ae701061052e680e315b

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\WWINTL.DLL.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
145KB

MD5
9deafd1ee64bbf92e174aec674dc9f4a

SHA1
cfdf286724932aab6f4ca64ebbb1261ceb2f6008

SHA256
68f4a978f2381fe232afe2ebf35e4cf22df028f7b6e9d2f1690ea50864d64a54

SHA512
f2c4514739f18da75f35e6e3402d1f8486c642a42e6d3d8be07687f83de7aac1b82ee4f6a2ce444973064460a55046e245b36cc482226256cc19425af035be98

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\WWINTL.REST.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
1.1MB

MD5
e5e17a83eadf99b7c58f70030449314e

SHA1
2a5362da3adc8af0c88e344a137f1ac4dbcab534

SHA256
aa4e2ee67dfbd0c4b0b91d924d915e9aa69db289c9f2f0457256e30ff3d5d546

SHA512
16bfb69b467c6ce28993f697f943a6034d7bf6478e2aef5cf24a99c26c5b71554c55783650ed8d18013f7efbfdef738da3516ba29dddaff2aeff6d358cc3460c

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\XLINTL32.DLL.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
142KB

MD5
823456906ede481231424bd94003f37b

SHA1
9aefc137801a1c1349c140d19345cdf6f7f7208c

SHA256
86461f2a01c2d00853d353c327f0ad030b19f71aee7f4b142590265cd08c37a6

SHA512
cbe0fcada0481fd786f2c00b540c6411ac5c121ec5c4e5325694cdb616020b8c48661cde4c1f8e91af97222ba6fe927a815d7004224826214e1856e8f282c041

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\XLINTL32.REST.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
1.2MB

MD5
483ebf069cb27f49a134db42d2066c1d

SHA1
083dd9d2a452f47a9c01d52c7f95d7f02bb1e1a3

SHA256
400469464b8e921e3fb5d5039ddb6a8f997920478121fbf22011c2ce07c57008

SHA512
b2f7c65f1e7397fa476115a33ddf13130e39b0db8e06faba43f8bd2cbf638c3bdee7134f771a859b3ba54e38690fef5b70a42c3c14a33d9d90ee465a080e52d8

Download Submit
C:\ProgramData\Microsoft\OFFICE\UICaptions\3082\XLSLICER.DLL.trx_dll[[email protected]][1].[8373001E-F343000A]

Filesize
14KB

MD5
b2509d5f62104bcb453da33ed7ad1954

SHA1
1d7facdbc53efcedaa2d9d2f36b1d5a4ada8e363

SHA256
221d9829e1973502dfa3dc08a8490b6bac197918a0bf818e63c8080702939f51

SHA512
aeabc27ed0c1e057fdd0950ab36f8a7dced0b01b965ce9d725431b11269a69a7c21d6432d1012a721126263754a5867cc8b752e4af7539a07be0cb067bbc02c4

Download Submit
C:\ProgramData\Microsoft\OfficeSoftwareProtectionPlatform\Cache\cache.dat[[email protected]][1].[8373001E-F343000A]

Filesize
32KB

MD5
89841322f01ad68486774461a4707925

SHA1
e1d878edaebbebbb019903b2007b713dff4bb1e3

SHA256
c460b6ead0205fa9bbbca56cf1368597bed38aaf5cdc021823ac1a991d4bc560

SHA512
f89fad9447d6bc4470026931991684b47e0e4b236c33ff17dbce11e2ab68fc766e7f9172a8b162fcde7c92e71d467bf3f7b30aa08e9ac63b24cc7c62498bc3e4

Download Submit
C:\ProgramData\Microsoft\OfficeSoftwareProtectionPlatform\tokens.dat[[email protected]][1].[8373001E-F343000A]

Filesize
2.3MB

MD5
bbfe4868b340418953cde45da80841ac

SHA1
ab3fc299afd785213a114447169563a96e073a51

SHA256
bcee45784353a4d8545b1131a0a74f8ea2ada7f426de6df3559cc88eb65880dc

SHA512
0c1b9cd182f0193240faf1c2e80aa33e381dbf198bd6687fd0193902bd0cb0b7c82b7bd50fc401606180deb412deb2380ea8de57604d2fc0bd589fce6e148ebf

Download Submit
C:\ProgramData\Microsoft\RAC\StateData\RacMetaData.dat[[email protected]][1].[8373001E-F343000A]

Filesize
617B

MD5
789351a4a3bd845336b95be452a57830

SHA1
72df4182a6848b9085cedd551e4eb346a482643f

SHA256
59ca2bd22818313b87073a5c4eb01ce53c3c438eb0f91cec1574836c1a5de005

SHA512
a94436f224452da0e74afc53700c07b11d65627fa430b005bccb455d437e73c39af971c2dd027af66cb6e0369fdaf3451e21fa103334a8c27f18d1ed0ba1bd57

Download Submit
C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\update-config.json[[email protected]][1].[8373001E-F343000A]

Filesize
735B

MD5
8c49c2bdc592c3675220523425aa9eab

SHA1
61fe31f61f4c08331209b910b9c50b7eac194e37

SHA256
dfb212d73f634599db589815fd8efcae68043232169bc2e7203d0c8a29f8f19f

SHA512
e0e0ceddf8496cf253530386b314a9fec57dd0a5c20e5507afdd210e1e73ab902975729ec4cc918982ce943b4df6bf5a6fa57a0562636452170e06357e06971d

Download Submit
C:\ProgramData\Package Cache\54050A5F8AE7F0C56E553F0090146C17A1D2BF8D\packages\Patch\x64\Windows6.1-KB2999226-x64.msu[[email protected]][1].[8373001E-F343000A]

Filesize
1010KB

MD5
adc3d679ad1e89dd660cf3cf179ba64a

SHA1
337fcf90d15cb25e48aaf1469f9f9f1e0efb500a

SHA256
2213edee97bd73b8858bd2ee49fe7bfffb8885a8eb359a4f259f8058cf972cd4

SHA512
3850ac6fbfef2273c9a2e648b8c1ad80628d1027bdc524cd985eef2bcec36e56e359f4a7d18f2914aa181054ebd24075badba34cd701a016ab641ed234f7bfe4

Download Submit
C:\ProgramData\Package Cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\state.rsm[[email protected]][1].[8373001E-F343000A]

Filesize
1KB

MD5
d64650bf99e1fb30f2115c7f6d095f0e

SHA1
4299963ae98036fc4892faecb6c95b190b398eb3

SHA256
f2dd2330a0adfae44b74d8317f4aafdb3318f3d24df6a289e8ee579a817b52bb

SHA512
40838c832480c49938d76f620e6f1933c7660b598d2b57fe5ab2eace1af8643ccb6cd7d8b8896bf4700457032e8d1154e9af0a2bd0c4081c00b56fb4975ba611

Download Submit
C:\ProgramData\Package Cache\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi[[email protected]][1].[8373001E-F343000A]

Filesize
148KB

MD5
a8349b8a1ff549ed56f6d6e5f48a6e43

SHA1
6048931c46c3f4072df077c95db37106b077a812

SHA256
703717f807afa298826826be64f6095034f021ed9cf70167bf1adac8c47989cb

SHA512
9ae7091642b225044f1ec314b080faf0ba6b2a57f8b843085d2ed65fdf26d60f00898954713d9fcd2d0575f40a4772b97e5d08795c4d7643eb74673bdc8efec7

Download Submit
C:\ProgramData\Package Cache\{4d8dcf8c-a72a-43e1-9833-c12724db736e}\state.rsm[[email protected]][1].[8373001E-F343000A]

Filesize
1KB

MD5
15534cfd840c9797e4dee9c7c43fd541

SHA1
53638dd5f87946ca15f1411c8e5e4248830591a9

SHA256
763548e0c372acd8e8c98c558f4b8f9e919ea00969ec857f085413bb8b40c5e3

SHA512
5d5062e4f9c242b0108231d458b0893157eda53dc7f28929c421a1a13cbb787f87f4365ca64d5c5d2c9620b42e3843da9d47aafd715eabda71395859dc44361c

Download Submit
C:\ProgramData\Package Cache\{5740BD44-B58D-321A-AFC0-6D3D4556DD6C}v12.0.40660\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi[[email protected]][1].[8373001E-F343000A]

Filesize
140KB

MD5
d8aeda9e71a3814aa992526d5f53a832

SHA1
813963d085a7ca2e7a6066df8bfdc498e79adb1d

SHA256
98082a17a31d3c0af12769c3b7062bc5a9db9a32399118de944d593dd3619ff5

SHA512
79439ec50d0dfd941e52832555d8ebcd92b990d3e4a56c1517d530f1f6439143d1918994caba3c89d726d419d3263a0f4a23e0a7c935c82be0b3cb81355ca66d

Download Submit
C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\state.rsm[[email protected]][1].[8373001E-F343000A]

Filesize
1KB

MD5
eb72a45d51e0282c5a38c428c49396f0

SHA1
0400a2da6e2e0062164ecc69dbaa370611b84df2

SHA256
8e88f883344f4c367a3a7e7e85eab34254309732a480d0c671eb7ade6da8e74d

SHA512
cc1a213cffa276e9d0b865051f701d6fb60b351cd17a88637ba954d5e1bea849255758003459251487de408789fc28fa0152e148eb92fcc11568395e78b016d8

Download Submit
C:\ProgramData\Package Cache\{61087a79-ac85-455c-934d-1fa22cc64f36}\state.rsm[[email protected]][1].[8373001E-F343000A]

Filesize
1KB

MD5
5de80384d2962354a3b7d05ac1e2eb50

SHA1
ea76ca25f0b5671b0846873128494d35f83a3f34

SHA256
5c23c73caa1bf8fb425deb4c413a42b2efe03accbe21c616553425546ba8ab94

SHA512
a1301b91d7ee84fadde5dc0197008fc95874858a3a64afacfe2d2200574924a0bd8a0496a7589f08b360e34f6d697aad948109b3141b5afe1af5fcf0995763ef

Download Submit
C:\ProgramData\Package Cache\{662A0088-6FCD-45DD-9EA7-68674058AED5}v14.30.30704\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi[[email protected]][1].[8373001E-F343000A]

Filesize
180KB

MD5
ee3919c6285e72d6978a6929c42b4f6f

SHA1
58eed195b6c7455035cafecba3e0b54a25dd974f

SHA256
a6d802025e11192e007e63717853c4d4fc4330d7729c337233efff3bf5b46179

SHA512
420d856307d5f57647b35fc5089edf96409590237bb9ce9d8c100b64d52a48471a8674135d2c11e6229e44047812449129be1e1442e8c5fc5ca9cb3cf7020dad

Download Submit
C:\ProgramData\Package Cache\{6DB765A8-05AF-49A1-A71D-6F645EE3CE41}v14.30.30704\packages\vcRuntimeAdditional_amd64\vc_runtimeAdditional_x64.msi[[email protected]][1].[8373001E-F343000A]

Filesize
180KB

MD5
359fed9c6ad899583b49ed69510929aa

SHA1
649b4e77c9092ec5ecb128ef44bb670167874d02

SHA256
17efec6245aac02087075f0e5499e58fbba264ab5a79a473a7a71fb249c777d0

SHA512
ede8d5c3f1f692838f982e561e3c104e6e770508a0a84d578fee28ba2ed3f8741e25ce99f2cd14fb873acc84d78ee62e61e217b9eeeb1a19db704787bddc87df

Download Submit
C:\ProgramData\Package Cache\{7DAD0258-515C-3DD4-8964-BD714199E0F7}v12.0.40660\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi[[email protected]][1].[8373001E-F343000A]

Filesize
140KB

MD5
2e081103d64cb7225edfc0a6a790d5bd

SHA1
9f630673ba332ef821929b1da19998bb92c922dc

SHA256
a1aa5797993eb14a6d3a286d59db57d22ed034b2c49236aeac425b0c50b20d2f

SHA512
d6dcaf3971e4cc2712ffba559138b3923d2b161a13724c10b2ef635ec6ef53d0ecd4083eb925d5312a121ef99c00e13bcfffa1c2b0f8d1227f67576ca6a742c7

Download Submit
C:\ProgramData\Package Cache\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi[[email protected]][1].[8373001E-F343000A]

Filesize
148KB

MD5
5987b51f7256d03b066aea8755c10f0a

SHA1
73036bf72e95c9afbbeb3a652439ce7da7a856bd

SHA256
397ea455619be40dacdcbbf3c5f95a902c18dbc025a4d3792b4124a26688c959

SHA512
842b15112616e03fca3a6c2e14f08c9c717256c15f199ad6b48ae16b5617a851cf073978324af4a0570e34b5e5f5d6cff8feeb3d3895e22026a25455b75110d3

Download Submit
C:\ProgramData\Package Cache\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi[[email protected]][1].[8373001E-F343000A]

Filesize
148KB

MD5
a0c6f92c0e194a90bcac75c4b92c30e0

SHA1
91cf2135c7a85369e987f78538aa33171385bc1e

SHA256
d55ade80df9f7d71b26d4551615d1015165db51acc2e0078185056d4914cc597

SHA512
a7c99e00b0bcd5034aa28cada3978f2b20a85ce9f602a6ef362a15652ea1a44b95080a8d0f40332f01f56aeec7af4a2d8cfa2a106add4f95c65c62ca713af4de

Download Submit
C:\ProgramData\Package Cache\{BF08E976-B92E-4336-B56F-2171179476C4}v14.30.30704\packages\vcRuntimeAdditional_x86\vc_runtimeAdditional_x86.msi[[email protected]][1].[8373001E-F343000A]

Filesize
180KB

MD5
df3f45fa08b997ba0e64e8a37408dfaa

SHA1
3b4aff82c14b94320b683cabb1da814d20dd74c7

SHA256
b2fe559edb2a66fef4b33d94d9de0e1fd9c9e99318544175072c55756304d099

SHA512
35cac24a212c539ca684c2d09d0bb35e5c78b439436947b3ce263c7571c5ab3e0dd32c95798c2609b1a3c99e7933c2927b8d711297cb5695e29b73edc6a55f16

Download Submit
C:\ProgramData\Package Cache\{CB0836EC-B072-368D-82B2-D3470BF95707}v12.0.40660\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi[[email protected]][1].[8373001E-F343000A]

Filesize
140KB

MD5
82dc7b139a27311154b6342c89fa5491

SHA1
0399f840c2c0a6e339ad0f00340051f1c87d5a04

SHA256
da6ca2c82c361244b28f15ce670755da4f0654ab0a3d9e81fec0c467fa332089

SHA512
23d07e656032925994a8f83e937f72a2e5ed972100c33d72e7c07ae087a32d003237b93cff8fbaa86a97e08a6b5dd847ce03604effbd97417e3e378e8d7991b8

Download Submit
C:\ProgramData\Package Cache\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\packages\vcRuntimeMinimum_amd64\vc_runtimeMinimum_x64.msi[[email protected]][1].[8373001E-F343000A]

Filesize
148KB

MD5
456ad0d75ab577e9e6bffb19ad9fba2d

SHA1
a158538ad73dd0d6d73a30b10c6ed1fde3f2bef3

SHA256
460a2bfb360ac58f22e0668bb3cac7055334dd27610defd2a18fa6e6100645a3

SHA512
fdc4425a1249b5a7ea2df1c9ca51259406f6ed7f74f8efb997d48d37394d8019ca443a200a914af971b0c95892a87ccc9470e44b453d7ff98fa95cd5f539784f

Download Submit
C:\ProgramData\Package Cache\{E30D8B21-D82D-3211-82CC-0F0A5D1495E8}v12.0.40660\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi[[email protected]][1].[8373001E-F343000A]

Filesize
140KB

MD5
3c2a649920b4563e3e44add6a055e63b

SHA1
399223d43b21305562cdb7edfaa252780b4b7e1e

SHA256
bda7b8665841dc18464a0ac9324e42325ab4781b4fd5d33b0e03dc7863ba2068

SHA512
d6b39b32819c6d5bcf233cab11a07b5c562be9b39b98a225d984ef6b7b339ef01826cde2096abf892923fbda93ca852e9cf4083a602ef8a7a3f896bd19c8a19b

Download Submit
C:\ProgramData\Package Cache\{F6080405-9FA8-4CAA-9982-14E95D1A3DAC}v14.30.30704\packages\vcRuntimeMinimum_x86\vc_runtimeMinimum_x86.msi[[email protected]][1].[8373001E-F343000A]

Filesize
180KB

MD5
c89c41224f2b86e5127d25537e42fcd4

SHA1
84584b9a9475f6683a4ee081f4e2157b7b5aa3b0

SHA256
5d381e4f399704124af2de13cb228974639b7045b766294a277cec6e8535dfa4

SHA512
3cb80d8645c7165ba8811b7308ec2c38cbed09531b52cbab339c8dc6e3f4cb31054d6488032a19c089bd5c7be13ddf4e95aee9a0024e8ace7504b060131c08c2

Download Submit
C:\ProgramData\Package Cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\state.rsm[[email protected]][1].[8373001E-F343000A]

Filesize
1KB

MD5
7ac31daf97bdd775fdf6812c7b3c24df

SHA1
4e70edfd63a1caaf8798e59ac60bdee4714d3b9f

SHA256
9286af2c7e7e5e35f44fa136e3d47b6c08c585e47fc484393e16a4d32050ee2c

SHA512
6668d3b332a4479ec8e00c742a4832d627345e00f4bf422e4116f65f9d09429f0f7e59c8630f92a0a52f47f1ccfc0a38411b962d6e60c003c27fbc58ac957f5f

Download Submit
C:\ProgramData\Package Cache\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}\state.rsm[[email protected]][1].[8373001E-F343000A]

Filesize
1KB

MD5
401a6ea975ea73a76eb179f1b43b602c

SHA1
04b29d8116f27f4f7454431cb4b220b6e41532f6

SHA256
b6de9373e12d011cb993fd7d59622db4d5f70351187d896c5d95fb9cf3fb500f

SHA512
c6363111dd3f81c472c4845c67ed34003adbe5b26d0fa18e8118a52a066ef50610791ff0a2531be85174c67f5d7e4108f51b629ebedcfb562e6a2701482cd479

Download Submit
memory/2412-7-0x0000000000400000-0x000000000137D000-memory.dmp

Filesize
15.5MB

Download
memory/2412-6-0x0000000000400000-0x000000000137D000-memory.dmp

Filesize
15.5MB

Download
memory/2412-1-0x0000000000400000-0x000000000137D000-memory.dmp

Filesize
15.5MB

Download
memory/2412-8-0x0000000000400000-0x000000000137D000-memory.dmp

Filesize
15.5MB

Download
memory/2412-952-0x0000000000400000-0x000000000137D000-memory.dmp

Filesize
15.5MB

Download
memory/2412-13242-0x0000000000400000-0x000000000137D000-memory.dmp

Filesize
15.5MB

Download
memory/2412-23674-0x0000000000400000-0x000000000137D000-memory.dmp

Filesize
15.5MB

Download
memory/2412-23796-0x0000000000400000-0x000000000137D000-memory.dmp

Filesize
15.5MB

Download
memory/2412-23797-0x0000000000400000-0x000000000137D000-memory.dmp

Filesize
15.5MB

Download
memory/2412-23801-0x0000000000400000-0x000000000137D000-memory.dmp

Filesize
15.5MB

Download
memory/2412-24401-0x0000000000400000-0x000000000137D000-memory.dmp

Filesize
15.5MB

Download
memory/2412-27169-0x0000000000400000-0x000000000137D000-memory.dmp

Filesize
15.5MB

Download
memory/2412-27170-0x0000000000400000-0x000000000137D000-memory.dmp

Filesize
15.5MB

Download